Http://username:pass@IP:pass

Http://username:pass@IP:pass SearchSearch
Author Message
Anonymous
 
Posted on Friday, June 24, 2005 - 03:28 am:   

when i setup Microsoft windows 2003 security patches i coudn't login this manner why?
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 4675
Registered: 10-2002
Posted on Wednesday, July 27, 2005 - 09:39 pm:   

NowSMS will still support this format for 2-way command URLs. So you can continue to use this format when required for a 2-way command (which is the only area where we have recommended using this format).

Generally speaking, you are correct, Microsoft Internet Explorer has stopped supporting this syntax for including "authorization" information in an HTTP URL (although they still support it for FTP URLs). And it's been like this for awhile ... not just recent security patches. I've never seen a version of IE6 or later that supported this syntax for HTTP URLs.

Firefox does support it, but displays an annoying dialog box to confirm before going to the site.

So I can only figure that this syntax was exploited as a security problem in a web browser at some point in time.

But this has nothing to do with NowSMS ... in NowSMS we support this URL syntax for defining 2-way commands, so that "authorization" headers can be included when NowSMS performs the 2-way callbacks.

-bn