Can't open websites with password in address bar

[Fred Bloggs]

I'm using IE6 and WinXP.
When I type in an address in the address bar to include a login and password
(eg. http://fredbloggs:[email protected]) it gives me an error page
that says 'This page cannot be displayed..' The page you are looking for
might have been removed, etc., etc....

However, if I just type in the www.anysite.com address it takes me to the
home page no problem.

What's going on here? In IE5 I never had that problem. I've lowered all the
security, am using a 128 bit setup, etc.

Any expert out there who can help?

Cheers
Fred

 

[Don Varnau]

Fred,
The Cumulative Security Update for Internet Explorer (832894) is preventing
this type of login.

See: http://www.microsoft.com/technet/security/bulletin/MS04-004.mspx

There's a registry edit in http://support.microsoft.com/?kbid=834489 to
bypass this feature, if you really want to do that.

Hope this helps,
Don

 

[Alan Edwards]

"usernameassword@" information.

A security update is available that modifies the default behavior of
Internet Explorer for handling user information in HTTP and in HTTPS
URLs
http://support.microsoft.com/?id=kb;en-us;834489


http://www.microsoft.com/technet/security/Bulletin/MS04-004.asp
Microsoft Security Bulletin MS04-004
Cumulative Security Update for Internet Explorer (832894)

....Alan

 

[*Vanguard*]

"Fred Bloggs" said in news:[email protected]:

I'm using IE6 and WinXP.
When I type in an address in the address bar to include a login and
password (eg. http://fredbloggs:[email protected]) it gives me
an error page that says 'This page cannot be displayed..' The page
you are looking for might have been removed, etc., etc....

However, if I just type in the www.anysite.com address it takes me to
the home page no problem.

What's going on here? In IE5 I never had that problem. I've lowered
all the security, am using a 128 bit setup, etc.

Any expert out there who can help?

Cheers
Fred

The use of a username and password in an HTTP URL was illegal and
violated an RFC. I'd have to go look again but it lists first a generic
URL scheme and is then followed with the differences that each URL
scheme uses, like FTP, mailto, HTTP, and so one. The HTTP URL scheme
does NOT permit a username and password as does the FTP URL scheme. So
Microsoft made their browser *more* RFC compliant. I suppose if the RFC
got amended to return that "feature" because it was a de facto standard
(i.e., if it became a real RFC standard) then they would have to put it
back.

 

[PA Bear]

Look in Add/Remove Programs for "Internet Explorer Q831167". Is it there?
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/security/articles/spyware.asp