in reply to Login and htaccess

Have you tried redirecting to 

http://userid:passwd@www.example.com/dir/file.html

[download]

I'm not sure if that still works.

Replies are listed 'Best First'.
Re^2: Login and htaccess
by jacobb20 (Novice) on Apr 25, 2006 at 21:17 UTC
    Just tried it...didn't seem to work.

    Get a Page cannot be displayed
[reply]

      Must you use Basic authentication? The standard alternative is to create a session in the first page and return the session id to the client (via cookies, url param or hidden form fields). Scripts in the protected directory must check if the session id is valid. If you're trying to protect static files, you'll need a custom mod_perl auth/autz handler or similar.

      I think CGI::Session is the module normally used for this.

[reply]
Re^2: Login and htaccess
by monarch (Priest) on Apr 26, 2006 at 05:26 UTC
    You should know that, in this article, Microsoft explain that they have deliberately withdrawn support for this URL syntax from their Internet Explorer browsers.

    Personally I am baffled as to why Microsoft made this decision as support for it does not make any site more or less secure.

[reply]

      It's use for protection against spoofing. People would email URLs such as
      http://www.ebay.com@3478348818/verify.cgi?id=827439327432
      in phishing emails. It looks like some URL at www.ebay.com, but it really contacted 209.197.123.153*. These URLs could fool even the trained eye, if it wasn't too careful.

      It seems they also prevent http://3478348818/ and other uncommon forms from working now.

      * – Keep in mind that 3478348818 == ((209*255+197)*255+123)*255+153.

[reply]
[d/l]
[select]
        So why couldn't Microsoft fix the display issue in IE rather than disable the entire point of the URL (passing usernames and passwords to that URL)???

        This was a horrific misuse of monopolistic power in the marketplace by Microsoft and inflamed me when I discovered this (as I had been relying on it).

        Honestly, you'd have to have no respect for the technological world or any respect for human beings in general to work for Microsoft.

[reply]

In Section Seekers of Perl Wisdom