embedding passwords

smokedog · 18 Jul 2006 at 13:59

Is there a way using html or javascript to autofill in a password pompt box? By embedding the password and username within the code?

Thanks

Beansprout · 18 Jul 2006 at 14:24

Why would you want to do that? You may be able to put the username in but hopefully not the password as it should be encrypted on the server...

toString · 18 Jul 2006 at 15:57

What would the point be in having a passoword box if it was already filled in...

smokedog · 18 Jul 2006 at 16:41

KingAdora said:
What would the point be in having a passoword box if it was already filled in...

Its a long story but I got it to work with Firefox but not IE.

By entering the details in the following way.
http://password:[email protected]

But it doesn't work in IE, anyone know why that is?

Beansprout · 18 Jul 2006 at 16:51

I believe that's down to IE disabling that URL format due to vulnerabilities which were quite a large problem before it was patched

Dj_Jestar · 18 Jul 2006 at 16:51

You've got them the wrong way round, should be http://username:password@domain/
Firefox may (can't check atm) automagically fill in input types "password" when using this type of funkiness.

|Ric| · 18 Jul 2006 at 17:02

Dj_Jestar said:
You've got them the wrong way round, should be http://username:password@domain/
Firefox may (can't check atm) automagically fill in input types "password" when using this type of funkiness.

doesn't seem to here

smokedog · 19 Jul 2006 at 16:34

Anyone know of a way of getting this to work then ?

Dj_Jestar · 19 Jul 2006 at 17:11

apologies for the mixup before, only just realised you meant HTTP/401 auth and not just a form with username and password inputs.

So basically, you want the ability for a user to login via HTTP auth, and for it to 'remember' them?

That's down to the browser unfortunately, Firefox and IE 'remember' passwords, but not all browsers do.

Sic · 19 Jul 2006 at 17:13

if you were mad, you could probably set the username and password to a session so they only had to fill it out once. then set the session to last like 100 years. i don't really know why you'd want to do that though - just save the username and password to the browser, as Mr_Jestar said.