[Date Prev][Date Next][Thread Prev][Thread Next][Interchange by date
][Interchange by thread
]
[ic] Forms action question
At 11:02 AM 7/3/2002 -0700, you wrote:
>At 10:48 AM 7/3/2002 -0700, you wrote:
>>Also, why is the form action "[process secure=1]" sometimes used instead
>>of "[process]"? Wouldn't the AlwaysSecure pages take care of processing
>>that page securely?
>
>Yes.
>
>>In other words, if I want the information on the login page to be
>>processes securely, wouldn't adding login to AwaysSecure take care of that?
>
>Yes.
>
>>Why is secure=1 necessary?
>
>So that if the user calls the page directly (by manually typing the in the
>URL), or someone else links to it and forgets the https://, then
>AlwaysSecure will *still* secure the page.
Never mind, what it *really* does, is makes sure a page is secure even if
you don't use secure=1, and even if you just link to it via [area]. I'll
go increase my caffeine dosage now...
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| Dan Browning, Kavod Technologies <db@kavod.com>
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Celebrate Hannibal Day this year. Take an elephant to lunch.