Is there a way to do 'extract' the password, without using cookies?

Regards,
Thomas

-----Oprindelig meddelelse-----
Fra: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]P� vegne af Norman J.
Nolasco
Sendt: 8. april 2002 23:28
Til: [EMAIL PROTECTED]
Emne: RE: [IMail Forum] Passing username and password


Allan,

You should be careful with this since it's pretty insecure, but I think
you can add this to your templates...

<script language="javascript">
<!--
        function getCookie2(name) {
                var cookieFound = false;
                var start = 0;
                var end = 0;
                var cookieString = document.cookie;
                var cookieValue;
                var i = 0;

                while (i <= cookieString.length){
                        start = i;
                        end = start + name.length;
                        if(cookieString.substring(start, end) == name){
                                cookieFound = true;
                                break;
                        }
                        i++;
                }

                if(cookieFound){
                        start = end+1;
                        end = document.cookie.indexOf(";",start);
                        if(end < start)
                                end = document.cookie.length;
                        cookieValue = document.cookie.substring(start, end);
                        start = 0;
                        end = cookieValue.indexOf(" ", start);
                        if(end < start)
                                end = cookieValue.length;
                        return cookieValue.substring(start, end);
                }
                return "";
        }

        function appendLoginInfo(strURL) {
                var output;

                output = strURL;
                output += "?uid=<!--IMAIL.UserID-->";
                output += "&pwd=" + getCookie2("IMail_password");

                return output;
        }

        function getPage(strURL) {
                document.location = appendLoginInfo(strURL);
        }
//-->
</script>

I haven't tested this, but if you can read javascript, it should make sense.
I think this should only work on IE. Just attach this to some button.  For
example,

<input type="button" value="SUBMIT"
onclick="getPage('http://www.domain.com/page.asp');">

One problem with this method is a security issue.  Someone could possibly
retrive
the username/password combination from the browser's history, cache, server
logs, etc...

-Norm


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Allan Crossley
Sent: Monday, April 08, 2002 2:07 PM
To: [EMAIL PROTECTED]
Subject: [IMail Forum]


Hi,

This is my first post to this forum, so I hope I'm doing this correctly.

I'm using I-mail with the webmail templates from humankindsystems. After
someone logs to the webmail they view the welcome page and I would like to
put a link on this page to pass them on to another webserver and some asp
pages along with their username.  The link part is easy, but I would like to
pickup their username (and even password) to pass onto my asp pages.

I've seen lots of posts regarding redirecting userlogin information INTO
webmail from asp pages etc, but I want to go the other way.

Any ideas?

Thanks

Allan Crossley


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to