VoxCommando Forum

General Discussion => General Discussion => Topic started by: Haddood on January 19, 2015, 02:19:21 PM

Title: User id & password in url
Post by: Haddood on January 19, 2015, 02:19:21 PM
Ie and Chrome has dropped passing user id and password in url ...


So something like
Http://user:pass@domain.ca

Won't work anymore

Will that affect scrape, robob & other commands in VC?
Title: Re: User id & password in url
Post by: jitterjames on January 19, 2015, 03:02:38 PM
Can you refer us to some kind of source for this information?

I don't think it will change anything.  It will probably come down to how individual servers deal with authentication.  There are many different methods.
Title: Re: User id & password in url
Post by: Haddood on January 20, 2015, 01:07:30 PM
can't find the original source ... :( I was looking to create a command to update the IP automatically with no-ip ... and read it somewhere .. and when I try

http://user:pass@dynupdate.no-ip.com/nic/update?hostname=domain.com&myip=198.48.129.133

however I found this (I can only access the cached page):
http://webcache.googleusercontent.com/search?q=cache:P_CAOhmuLAkJ:support.microsoft.com/kb/834489+&cd=9&hl=en&ct=clnk&gl=ca
Title: Re: User id & password in url
Post by: jitterjames on January 20, 2015, 01:20:59 PM
Sounds like it only affects recent versions of IE so probably won't matter in a scrape action but might affect RoboBrowser.

But it will still depend on what kind of authorisation methods the server accepts.  If IE no longer supports this method then the number of servers that allow it in the future may go down.
Title: Re: User id & password in url
Post by: nime5ter on January 20, 2015, 01:38:30 PM
Quote from: Haddood on January 20, 2015, 01:07:30 PM
however I found this (I can only access the cached page):
http://webcache.googleusercontent.com/search?q=cache:P_CAOhmuLAkJ:support.microsoft.com/kb/834489+&cd=9&hl=en&ct=clnk&gl=ca

http://support.microsoft.com/kb/834489#LetMeFixItMyselfAlways

But in terms of the Scrape actions, that kind of basic authorization is generally handled by using the "username" and "password" parameter fields, so there is no need to use the user:pwd@address.com format of URL. Just enter the core URL and put the username and password in the appropriate fields. http://voxcommando.com/mediawiki/index.php?title=Actions#Scrape
Title: Re: User id & password in url
Post by: Haddood on January 20, 2015, 01:49:55 PM
I think chrome is doing the same and other browsers are following ...
I believe the idea is to avoid exposing the credentials ... technically anyone sniffing the traffic will get usernames and passwords on a golden platter