Howto:Provide User and Password as Part of the myPBX URL

From innovaphone wiki
Jump to navigation Jump to search

Once in a while, it is useful to start up myPBX with the user name or even both the user name and the password as part of the URL. This can be done using the following syntax:

http://X.X.X.X/PBX0/MY/client.htm#user=XXX

or

http://X.X.X.X/PBX0/MY/client.htm#user=XXX&pwd=XXX

If the first form is used, the log-in form will be filled in with the respective user name. If the second form is used, the log-in will take place right away, with no form being displayed.

Security Warning

You may wonder why this is not implemented using the standard URL Query Argument Syntax which would be something like http://X.X.X.X/PBX0/MY/client.htm?user=XXX&pwd=XXX. The reason for this is that using this feature imposes an inherent security risk. Keep in mind that both the user name and the password is in any case sent in clear over the wire. There is no way to work around this issue. But using the #user=XXX&pwd=XXX instead of ?user=XXX&pwd=XXX at least makes sure that the information is not kept in the browsers history file.

Retrieved from "https://wiki.innovaphone.com/index.php?title=Howto:Provide_User_and_Password_as_Part_of_the_myPBX_URL&oldid=25347"