$Web Password: Difference between revisions
Jump to navigation
Jump to search
mNo edit summary |
mNo edit summary |
||
| (One intermediate revision by one other user not shown) | |||
| Line 1: | Line 1: | ||
{{DISPLAYTITLE:$Web_Password}} | {{DISPLAYTITLE:$Web_Password}} | ||
<span class="pageSubtitle" | <span class="pageSubtitle">Password sent by browser</span> | ||
<var>$Web_Password</var> returns the password that was sent by the browser in the HTTP user authentication header ("Authentication"). | <var>$Web_Password</var> returns the password that was sent by the browser in the HTTP user authentication header ("Authentication"). | ||
==Syntax== | ==Syntax== | ||
<p class="syntax">< | <p class="syntax"><span class="term">%password</span> = $Web_Password | ||
</p> | |||
<var>$Web_Password</var> takes no arguments and returns either a null indicating that the browser sent no password or the password sent by the browser. | <var>$Web_Password</var> takes no arguments and returns either a null indicating that the browser sent no password or the password sent by the browser. | ||
| Line 14: | Line 14: | ||
<li><var>$Web_Password</var> can only be used during NEWSESCMD processing. Any other attempt to use <var>$Web_Password</var> will result in request cancellation. | <li><var>$Web_Password</var> can only be used during NEWSESCMD processing. Any other attempt to use <var>$Web_Password</var> will result in request cancellation. | ||
<li><var>$Web_Password</var> can be used in NEWSESCMD processing to extract a password sent in the HTTP headers and try to use it for a user login via [[$Sir_Login]]. Caution should be used with passwords returned by $Web_Password | <li><var>$Web_Password</var> can be used in NEWSESCMD processing to extract a password sent in the HTTP headers and try to use it for a user login via [[$Sir_Login]]. Caution should be used with passwords returned by $Web_Password — they shouldn't be stored in GTBL (though by default NEWSESCMD processing clear GTBL when it's done), database files, logged to the audit trail or, worst of all, sent back to the browser. | ||
</ul> | </ul> | ||
Latest revision as of 21:57, 5 June 2013
Password sent by browser
$Web_Password returns the password that was sent by the browser in the HTTP user authentication header ("Authentication").
Syntax
%password = $Web_Password
$Web_Password takes no arguments and returns either a null indicating that the browser sent no password or the password sent by the browser.
Usage notes
- $Web_Password can only be used during NEWSESCMD processing. Any other attempt to use $Web_Password will result in request cancellation.
- $Web_Password can be used in NEWSESCMD processing to extract a password sent in the HTTP headers and try to use it for a user login via $Sir_Login. Caution should be used with passwords returned by $Web_Password — they shouldn't be stored in GTBL (though by default NEWSESCMD processing clear GTBL when it's done), database files, logged to the audit trail or, worst of all, sent back to the browser.
Example
The following example from a NEWSESCMD program tries to use the HTTP headers to do a user login:
%USERID = $Web_User %PASSWORD = $Web_Password %RC = $SIR_LOGIN(%USERID, , %PASSWORD) IF NOT %RC THEN STOP END IF