Posted by Michael Fesser on 12/22/07 17:44

..oO(Sanders Kaufman)

>"Betikci Boris" <pardust@gmail.com> wrote in message
>news:1b3de3d4-2953-4c1d-b0fe-9ab9078a5433@r60g2000hsc.googlegroups.com...
>
>> The usage is something like that;
>> $url = 'http://username:password@hostname/path?arg=value#anchor';
>
>That'll work - but bear in mind that there's no LESS secure way of sending
>passwords than via the URL.
>Not only does it go over the net unencoded, but it also remains in a variety
>of "history" records.

That's why it's not allowed at all in HTTP URLs (there might be other
reasons as well).

Micha

[Back to original message]