Redirection includes UserName/Password

leon_zilber

Hi,

I am doing redirection from one to another sending Username and Password.

Basically,
Response.redirect(URL and passing login variable and password variable)

Unfortunatelly, values of those variables are displayed in the URL.

How can I make sure URL doesn't contain username and password values?

Thank you very much!
Leon

Anon

set a cookie with the values or read up on sessions, both will fix your problem

Anon

if both are bit diff then create a scrambler alog and keep it on the both side.

one from where the redirection occurs and other at where it is used.

scramble the username and password and unscramble to use

array of random alphabets. picking sequentially from scrambeler alphabets .

it is diff, but fun to try , any way you can use sessions etc.

toma42

If you use PHP and not ASP and you use a session id and store the uid and pwd in a database referencable from the session id, you don't need to worry.

If you keep using ASP, worry.