2 replies to this topic

[Cinossu]

I do not understand why this is happening, but for some reason $ipbwi->member->login is not working for me. It is completely ignoring the first two arguments for username and password, and instead just taking it from the URL's $_GET data ($_GET['username'] and $_GET['password']).

I have redownloaded IPBWI thinking it was a bug within that, but it is not. The function code I am using, just to test it, is..

$ipbwi->member->login("tits","up",false,false);

Obviously, I do not have a user with this password, but I can still log in via GET variables under any account.

I am completely and utterly stumped. Any ideas?

[Matthias Reuter]

Can not reproduce this problem. Nevertheless, you should use $_POST via forms to deliver username & password for security purposes.

[Cinossu]

Matthias Reuter, on 02 February 2012 - 04:07 AM, said:

Nevertheless, you should use $_POST via forms to deliver username & password for security purposes.

Oh, I know, and I would've been. I just noticed this working only through $_GET when testing. I did not understand it at all.