On Mon, Aug 9, 2010 at 4:28 PM, Platonides <[email protected]> wrote:
> So that can be done with a simple line at the top:
> if ($_GET['pass'] != 'mysupersecretpassword') die (1);

It's maybe not the best idea to authenticate using get (hint: the
super secret password is stored in web server logs (I'm not sure but I
think they are (partially?) available to public)).

A better approach would be to use HTTP-authentication or cookie-based
authentication (or at least a post request).

_______________________________________________
Toolserver-l mailing list ([email protected])
https://lists.wikimedia.org/mailman/listinfo/toolserver-l
Posting guidelines for this list: 
https://wiki.toolserver.org/view/Mailing_list_etiquette

Reply via email to