Re: Having my script login to a secure area of another site.....
| From: | Renze Munnik | Date: | Mon, 13 Aug 2001 07:41:42 +0000 |
| Subject: | Re: Having my script login to a secure area of another site..... | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-62379@lists.php.net to get a copy of this message | ||
On Fri, Aug 10, 2001 at 03:24:07PM -0700, Evan Nemerson wrote:
> Try messing with the query string, and emulate a GET request. For instance
>
> $uri =
> "http://www.somewhere.com/secure.php?username=bob&password=linuxrocks";
> $theFile = implode("\n",file($uri));
> echo $theFile;
Using/emulating GET for security isn't realy a very smart thing to
do. Everyone can just use the URL as you show it. Using POST isn't
completely waterproof either, but at least you don't just give a way
your security information.
--
* R&zE:
-- »»»»»»»»»»»»»»»»»»»»»»»»
-- Renze Munnik
-- DataLink BV
--
-- E: renze@datalink.nl
-- W: +31 23 5326162
-- F: +31 23 5322144
-- M: +31 6 21811143
-- H: +31 23 5516190
--
-- Stationsplein 82
-- 2011 LM HAARLEM
--
-- http://www.datalink.nl
-- ««««««««««««««««««««««««