Posted by Cord-Heinrich Pahlmann on 01/10/07 08:40

Gordon Burditt schrieb:

> Known best practices include:
> Don't store the passwords in plain text or reversible encryption.

Yep. I don't.

> Don't transmit passwords in the clear over the network.
That's something I do.
Question: Does it make a difference if I type my password into a
password-formular of a webpage or if my script computes the whole
login-form (so the password will be there, too) and then sends it via
POST to the webpage?

It would look like this:
<form action="http://www.ThePageIWannaLoginTo" method="POST">
<input type="hidden" name="username" value="MyUsername">
<input type="hidden" name="password" value="MyClearTextPassword">
<input type="submit" value="Login">
</form>

[Back to original message]