Thread: Auto login

Ben

This should do what you want

http://users.buy.at/menu/index.php?EMAIL=<span style="colorrange;">****</span>&PASSWORD=<span style="colorrange;">****</span>

Thanks a lot mate.

We should have an FAQ system on this forum.

Ben.

I don't like the fact that the ID and Password are used in every URL round the site.

Surely, once logged in it doesn't need to keep old of it?

I have also had the URL in my referrer logs when visiting one of my own sites after visiting buy.at

Just think, someone could get your info and change the payment details or see your best performing merchants etc.

Food for thought........:smokin:

If you login from our site, the password is never displayed in the address bar. It is only displayed if you login by the method shown above.

We do not pass the password around from page to page, we do pass a session id.

We also set a cookie when you log in. In order for a page to be displayed, the email address, session and cookie must all be correct. If someone obtained a url from their referer logs and attempted to use it within the lifetime of the session they would still not be able to gain access to your account as they would not have the relevant cookie.

Recently we did have an issue caused by one of our developers where the password was displayed in the address bar on one page only. This was as a result of some work being done on the login process. This only affected the url shown above by Keith. and was corrcted as soon as it was known about.