PDA

View Full Version : minor cookie concerns (& querystring)


tsadi
Tue 18th Apr '00, 6:21pm
great work John P !!! i cant wait to get a copy (well i actually just emailed my boss requesting him to buy a license :))

just an observation; the first time i logged in to create a new thread, i saw my username and password in the query string ... can something be done to prevent this ?
(i.e. http://vbulletin.com/forum/newthread.php?action=newthread&forumid=2&username=tsadi&password=mypassword)

also, my password was stored in clear text in the cookie that my browser created (tried it in netscape4.7 and lynx 2.8.2x) ... can the "bbpassword" in the cookie be encrypted first before storing it in the cookie ? (how about md5(); since it works only one way :-))

again, great job, i cant wait to transfer my UBB

bigsoccer tech
Wed 19th Apr '00, 11:38pm
yes yes nad yes if you want me to consider buying this

John
Thu 20th Apr '00, 5:14am
Yup - good thinking. In the next version, I will MD5 hash all cookies and passwords.

John

Menno
Thu 20th Apr '00, 4:02pm
Yay!
now we can all sleep a whole lot better at night ;)