Posted by Benjamin Niemann on 03/22/07 20:53

jmacione@engr.uconn.edu wrote:

>
> for some websites, it seems you can login with the username and
> password in the URL through the post. Example, for yahoo.com, below,
> you can repace the username with your own and mypassword wtih your own
> and then you are automatically logged in.
>
>
http://login.yahoo.com/config/login?login=username&passwd=mypassword&done=http://www.yahoo.com
>
> Im trying to do this now for other websites.
> gmail.com
> walgreens.com
>
> I could use some help if anyone knows how
> I cant get the post method to wrok for those sites.
>
> Ive also tried downloaded ethereal which I found by searching previous
> posts o n"post" and autologin but cant find how to get anyting
> substantial out of it which would help.

"post" means that the form data is *not* passed in the query part of the URL
(the part after '?' and before a '#', if there is one). The yahoo url might
be the result of a form with "method='get'".
If the server accepts the data from the query part depends entirely on the
server-side code used by these sites - this is different from site to site.
Usually it is bad practice to place the loginname/password in the query
part of the URL, because it will then be stored in server or proxy logfiles
or in your browsers history.
So in most cases it will not work.

What exactly are you trying to do? If you want to build a script which logs
in and performs some actions, you'll have to construct a POST request with
the credentials in the payload of the request.

--
Benjamin Niemann
Email: pink at odahoda dot de
WWW: http://pink.odahoda.de/

[Back to original message]