[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: default Apache configuration



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Said Janusz A. Urbanowicz on Tue, Mar 12, 2002 at 03:27:35PM +0100:

> The programmer. This is a very bad practice, the password also lands
> in the logs of w3caches along the way, in browser history, etc.

Not to mention that if the user happens to link to another site from
this page, the query string will be seen in the HTTP referrer header on
the remote site, which often shows up in stats programs.  

- -- 
[!] Justin R. Miller <incanus@codesorcery.net>
    PGP 0xC9C40C31 -=- http://codesorcery.net

    http://www.cnn.com/2002/ALLPOLITICS/01/29/inv.terror.probe/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8jhtC94d6K8nEDDERAsJWAJ9RH35acbFTq5NCq2kgmmvdBsB8TgCeJph7
15Da2MZxGIrNQuaQAsqfUqo=
=kIvO
-----END PGP SIGNATURE-----



Reply to: