Not valid url http://user:password@server/page.aspx

[Guest]

Hi

With the new security update of microsoft the URL http://user:password@server/page.aspx doesn't function

Anybody know any method to do this?

Anybody know the solution of this problem?

Thank

Silvia

 

[Frank Saunders, MS-MVP]

A security update is available that modifies the default behavior of
Internet Explorer for handling user information in HTTP and in HTTPS URLs
http://support.microsoft.com/?id=834489
What You Should Know About the Windows Security Updates for February 2004
http://www.microsoft.com/security/security_bulletins/20040210_windows.asp

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Guest]

Yes, but I have a program in visual Basic 6.0 than d

shell EXPLORER http://user:password@server/page.as

and it doesn't function

Do you know do this with de new security update of microsoft

Thank

silvia

 

[Frank Saunders, MS-MVP]

No, I don't.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Guest]

It is precisely because of this security patch that your program doesn't work any more as the patch makes changes to windows explorer and internet explorer. Micorsofts suggested workaround, copied here

If users typically type HTTP or HTTPS URLs that include user information in the Address bar, or click links that include user information in HTTP or HTTPS URLs, you can work around this new functionality in Internet Explorer in two ways

1. Do not include user information in HTTP or HTTPS URLs
2. Instruct users not to include their user information when they type HTTP or HTTPS URLs

....essentially reads as "do it another way" which isn't helpful at all. This method of sending usernames and passwords to a webserver does not work any more in windows/internet explorer so you will need to find an alternative

HT

----- Silvia wrote: ----

Yes, but I have a program in visual Basic 6.0 than d

shell EXPLORER http://user:password@server/page.as

and it doesn't function

Do you know do this with de new security update of microsoft

Thank

silvia

 

[H Leboeuf]

See if this article can help.

http://support.microsoft.com/?kbid=831167
SYMPTOMS
Programs that use Wininet functions to post data (such as a user name or a
password) to a Web server retry the POST request with a blank header if the
Web server closes (or resets) the initial connection request.

 

[Robert Aldwinckle]

"Silvia" wrote on Date: Fri, 5 Mar 2004 00:36:04 -0800

"Frank Saunders" replied on Date: Fri, 5 Mar 2004 02:55:45 -0600

Yes, but I have a program in visual Basic 6.0 than do

shell EXPLORER http://user:password@server/page.asp

and it doesn't function.

Do you know do this with de new security update of microsoft?

How are you interpreting the instructions of the article and what have
you tried?

I suspect that you need to follow the instructions under the section

<H3>How programs that host the Web browser control can use this new
default behavior to handle user information in HTTP or in HTTPS URLs</H3>

Specifically think about how you should adapt your case to the information
implied by the following sentence:

<quote>
To use this new behavior in other programs that host the Web browser
control, create a DWORD value named <VAR>SampleApp</VAR>.exe,
where <VAR>SampleApp</VAR>.exe is the name of the executable file
that runs the program.

Thanks

silvia

Good luck

Robert Aldwinckle
---


....

....

....