More information about the Underscore mailing list

[_] Sending directory username/password programmatically.

Richard Price richardprice at gmail.com
Tue Apr 1 18:44:16 BST 2008

On 01/04/2008, Jon Hadley <me at jon-hadley.com> wrote:
> Hello all,

>  Sending the url
>
>  http://username:password@domain.com/directory/protected
>
>  sort of works in Firefox (it doesnt cope well with refreshes for example).
>
>  However this url method seems disabled in IE7 ....
>

Thats because its not actually part of the http spec - MS removed it a
couple of years ago after a bout of security and phising flaws.

Have you considered NTLM at all?  That has the ability to silently
send authentication details and there are a few modules for Apache
that implement it.

Richard