[Hidden-tech] Proxy server to access protected website

Rich rich at on-the-net.com
Wed Nov 18 07:21:42 EST 2009


I think it might be better then passing their username/password around - 
but not much
and it might out the password were it is even more public.

It depends if the entry page in question is behind some other login,
if so - then it's a reasonable option.

Rich

Mik Muller wrote:
> Why can't they just use a regular form with hidden variables and only  
> display the submit button?
>
> Mik
> 413-320-5336
>
> Sent from my iPhone
>
> On Nov 17, 2009, at 11:23 PM, Rich <rich at on-the-net.com> wrote:
>
>   
>>   ** Be sure to fill out the survey/skills inventory in the member's  
>> area.
>>   ** If you did, we all thank you.
>>
>>
>> I have a pretty good idea of why it isn't working - this is not
>> using any kind of standard web login - it uses javascript to operate  
>> it's
>> process, which will only work with a browser - no proxy or server  
>> web tool I
>> know of will run the js.
>>
>> I see the same kinda of error he reports when using a command line  
>> tool
>> w/o javascript
>>
>> Anyone else have any ideas ?
>>
>> George Forman wrote:
>>     
>>> Dear Hidden Tech,
>>>
>>> Would anyone have a reference for where we might find a answer to  
>>> this
>>> person's question about using a proxy server to create a one click
>>> login to our username and password protected video library at
>>> www.videatives.com <http://www.videatives.com>.  A reference to an
>>> article or FQA would do fine.
>>> BTY, the abbreviation VSS below stands for "video streaming service,"
>>> our video library of over 160 clips that deal with child development
>>> and early childhood education.
>>>
>>> Thanks,
>>> George Forman
>>> Amherst, Massachussets
>>>
>>> -------
>>> Dear Videatives,
>>>
>>> Northwest Community College library is a new subscriber. I am
>>> attempting to use our proxy server (we use EZproxy software) to login
>>> to VSS. Users would login to our proxy server with their NWCC ID;  
>>> once
>>> authenticated the proxy server sends our VSS username and password to
>>> VSS. However, I'm having no success. Before I give up and post our  
>>> VSS
>>> username and password on a password-protected NWCC web page, I
>>> wondered whether you might be able to help.
>>>
>>> I've been experimenting with various permutations of the  
>>> configuration
>>> below. I think I've identified all your login form's variables.
>>>
>>> U -form=post videatives http://streaming.videatives.com/session/new
>>> FormVariable authenticity_token=
>>> FormVariable login=nwccuser
>>> FormVariable password=12nov2009
>>> FormVariable remember_me=
>>> FormVariable commit=Log in
>>>
>>> With FireFox, this configuration displays an empty page. With IE, I
>>> get an HTTP 405 Method Not Allowed error. According to IE "The  
>>> website
>>> has a programming error."
>>>
>>> Any help or suggestions you can offer would be appreciated.
>>>
>>>
>>> Thank you,
>>>
>>> =
>>> --- 
>>> ---------------------------------------------------------------------
>>>
>>> _______________________________________________
>>> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
>>> Hidden-discuss at lists.hidden-tech.net
>>>
>>> You are receiving this because you are on the Hidden-Tech  
>>> Discussion list.
>>> If you would like to change your list preferences, Go to the Members
>>> page on the Hidden Tech Web site.
>>> http://www.hidden-tech.net/members
>>>       
>> -- 
>> Rich Roth
>> CEO On-the-net
>>
>> Bringing you complex online systems since the net was young
>> http://www.tnrglobal.com - Blog: http://www.rizbang.com
>> Helping move the world:  http://www.earththrives.com
>>
>>
>> _______________________________________________
>> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
>> Hidden-discuss at lists.hidden-tech.net
>>
>> You are receiving this because you are on the Hidden-Tech Discussion  
>> list.
>> If you would like to change your list preferences, Go to the Members
>> page on the Hidden Tech Web site.
>> http://www.hidden-tech.net/members
>>     
>
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
> Hidden-discuss at lists.hidden-tech.net
>
> You are receiving this because you are on the Hidden-Tech Discussion list.
> If you would like to change your list preferences, Go to the Members   
> page on the Hidden Tech Web site.
> http://www.hidden-tech.net/members
>
>
>   

-- 
Rich Roth
CEO On-the-net

Bringing you complex online systems since the net was young
http://www.tnrglobal.com - Blog: http://www.rizbang.com
Helping move the world:  http://www.earththrives.com




Google

More information about the Hidden-discuss mailing list