$Web Password

Password sent by browser

$Web_Password returns the password that was sent by the browser in the HTTP user authentication header ("Authentication").

Syntax

%password = $Web_Password

$Web_Password takes no arguments and returns either a null indicating that the browser sent no password or the password sent by the browser.

Usage notes

• $Web_Password can only be used during NEWSESCMD processing. Any other attempt to use $Web_Password will result in request cancellation.
• $Web_Password can be used in NEWSESCMD processing to extract a password sent in the HTTP headers and try to use it for a user login via $Sir_Login. Caution should be used with passwords returned by $Web_Password — they shouldn't be stored in GTBL (though by default NEWSESCMD processing clear GTBL when it's done), database files, logged to the audit trail or, worst of all, sent back to the browser.

Example

The following example from a NEWSESCMD program tries to use the HTTP headers to do a user login:

%USERID = $Web_User %PASSWORD = $Web_Password %RC = $SIR_LOGIN(%USERID, , %PASSWORD) IF NOT %RC THEN STOP END IF

See also

• $Web_User
• $Sir_Login