Microsoft Security Update

[inter4design]

With the recent Microsoft Internet Explorer Update (Q832894) Which removes the ability to pass usernames and passwords through a url (ex.

http://user:pass@...

) is there any kind of easy work arounds that anyone knows about? Because alot of site links i know about will break because of this.

Thanks.

[M. Johansson]

Just don't enter them in IE. Use mozilla, opera or whatever.

[inter4design]

yeah thats ok for me i guess...but what about all the other users who visit the site, they're not going to change browsers.

[M. Johansson]

Why does the site have to rely on passwords passed in plaintext via url?

[inter4design]

Its a township site...basically allows users to view tax information for the city off of a secure server. The server has to be protected, so it gives them a guest user/pass access to the site to view the information

[M. Johansson]

I don't think I quite understand. Is this a unique username/password emailed to them or something?

[inter4design]

No, its coded directly into the site...so all the user has to do is click on the link and it automatically logs them in with the guest username and password

[DaveMaxwell]

Is this your site? If so, just code it so it defaults to the guest username and password if one isn't passed....

[inter4design]

It is defaulted to the guest user/pass....but with the new microsoft security update, they've prevented you from being able to use the

http://user:pass@

functionality

[M. Johansson]

Nono, he's suggesting that you don't pass it at all, and that the password-protected page just assumes that you are a guest if non password is passed.