How to include Passwords in CDML?

[ibiubu]

FMRes/FMPJS?-db=Products.fp5&-layID=1&-token=25&-max=1&-format=formvwcss.htm&-mode=browse&-findall

What code would I unclude here if I wanted to automatically bypass the prompt for the password for this particular page? Or is this even possible?

[Vaughan]

If you're going to embed the password in the web page or url you might as well not have a password!

Set up Web Security to allow browse access only to "all users" for this database.

[Garry Claridge]

If you choose to include the userid and password in the url, here is how:

http://username:[email protected]/FMRes/FMPJS?-db=Products.fp5&-layID=1&-token=25&-max=1&-format=formvwcss.htm&-mode=browse&-findall

The WebCompanion is a type of http server and uses http authentication.

Hope this helps.

Garry

[ibiubu]

OK that code works great for a URL link.

Now what about on a web page where I have a spot to type in a find criteria and a submit button for the find. Here is the CDML for the submit button. Is there a way to include the username and password here so when the submit button is hit there is no pop-up window asking for the username and password?

<form action="FMPro" method="POST"><input type="hidden" name="-db" value="Products.FP5"> <input type="hidden" name="-lay" value="CGI"><input type="hidden" name="-format" value="summary.htm" <input type="text" name="User" value="" size=15> <input type="submit" name="-find" value="Submit"></form>

[Garry Claridge]

Larry,

I was trying to do the same thing about a year ago. However, I had no joy.

All the best.

Garry

[Vaughan]

Try including the username and password in the url for the page *before* the form: that way the form's page will have the login info, and it may (only guessing) be also be submitted.

[Anatoli]

It can be done with "?username.password" URL ending and then with JavaScript. It can be then passed with the same to another page, filled in form or transferred with tokens.

[scratchmalogicalwax]

haven't tried it myself so I may be barking up the wrong tree but try adding it to the from action

e.g.

instead of just FMPro.......

have

code:

---

http://username:[email protected]/foldername/FMPro

maybe this has already been tried???

[scratchmalogicalwax]

just tried it and it seems to work.....

with Lasso but it's a HTTP thing so there is no reason why it shouldn't work with FMPro

....however I am interested in why you would want to include this infromation in the format file.....

PS as Vaughan said the username and password is held in the browser from a previous URL so this is an option if you dont want to include it in the form action..

[ March 20, 2002, 03:29 AM: Message edited by: scratchmalogicalwax ]

[ibiubu]

OK, I will hop on and give it a try right now to see if I can get it to work.

The reason I want to include this...

I am using custom web publishing to serve up job timelines, budget reviews, file downloads and notes on a per job basis.

The client goes to our main client web page, types in their user name, and they are taken to a new page that lists all jobs currently open for them. They then click on a specific job link and go to a page showing all the details for the job.

On that same main client web page I want to put a Administration link. This link URL goes directly to the database (almost like it would in instant web publishing). The main database now comes up for remote use. Our staff thru the web browser can add, delete, change ect records.

Here is where the password comes in. I can password protect the database on the Filemaker end. This way when a staff member clicks on the Administrator link they are of course prompted for the password to gain administrator access. Clients simply go to the username field and enter their user name and hit the submit button. This of course then finds any records containing their user name and shows them the specific data I want them to see about their jobs.

LR

[ March 20, 2002, 08:31 AM: Message edited by: Larry Ross ]