|
Posted by Cord-Heinrich Pahlmann on 01/10/07 08:40
Gordon Burditt schrieb:
> Known best practices include:
> Don't store the passwords in plain text or reversible encryption.
Yep. I don't.
> Don't transmit passwords in the clear over the network.
That's something I do.
Question: Does it make a difference if I type my password into a
password-formular of a webpage or if my script computes the whole
login-form (so the password will be there, too) and then sends it via
POST to the webpage?
It would look like this:
<form action="http://www.ThePageIWannaLoginTo" method="POST">
<input type="hidden" name="username" value="MyUsername">
<input type="hidden" name="password" value="MyClearTextPassword">
<input type="submit" value="Login">
</form>
Navigation:
[Reply to this message]
|