PDA

View Full Version : Passwords on URL


kdorff
Thu 20th Apr '00, 6:52am
This board looks great and I will definately consider buying it.

I did have one issue, though. When I did a login it displayed the password on the URL. I would greatly prefer either sending the password as a POST form variable (so at LEAST it isn't visible on the browser) or, better yet, do an MD5 of the password and transmit that way for comparison. That way the password isn't passed in clear text at all.

One final question, is there an optional mode that doesn't require logins to post? Just a free form forum?

Also, the ability to require a valid email account (register, click on a url in the email before being able to post).

Kevin

John
Fri 21st Apr '00, 1:52am
I did have one issue, though. When I did a login it displayed the password on the URL. I would greatly prefer either sending the password as a POST form variable (so at LEAST it isn't visible on the browser) or, better yet, do an MD5 of the password and transmit that way for comparison. That way the password isn't passed in clear text at all.


Yup, that is high up on my to do list. Expect to see that in the next minor release.


One final question, is there an optional mode that doesn't require logins to post? Just a free form forum?


You can use the user groups and permissions to allow unregistered members to post and reply to topics.


Also, the ability to require a valid email account (register, click on a url in the email before being able to post).
[/B]

Already there! :)

John