git.net

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Inject Authorization Header into WebView on Mobile


Are you REALLY sure that GET/POST parameters in HTTP calls are deprecated?
Wow, the guys at Google might be really pissed of trying to receive their
query strings... The Internet is really going down the hole indeed...

App request:
http://www.bilbo.com/yourtopsecretservice.php?login=john&password=doe

Server: yourtopsecretservice.php (untested, but I'm pretty sure it will
work if you just copy and paste those two lines)
<?php
if ($_GET['login']=='john' && $_GET['password']=='doe') echo "My top secret
response for John Doe's eyes only: hello world!.";
else exit('Auth error'); // and a 404 header would also be nice here
?>

On Tue, Sep 25, 2018 at 1:13 AM bilbosax <waspence41@xxxxxxxxxxx> wrote:

> @Javier, this method of sending the username and password has been
> deprecated
> by most modern browsers, and if not, throws up a big warning pop up.
>
>
>
> --
> Sent from: http://apache-flex-users.2333346.n4.nabble.com/
>