is this possible

sneakyn8 · Post by **sneakyn8** » Mon Nov 05, 2007 2:35 pm

is it possibble to login to a website through the url bar like say if the site im trying to log into was www.fakewebsite.com and my username was five and my password was fifty could i type in www.fakewebsite.com/five/fifty and go to the websites homepage logged in?

V0Lt4Ge · Post by **V0Lt4Ge** » Mon Nov 05, 2007 2:37 pm

Nope.

sneakyn8 · Post by **sneakyn8** » Mon Nov 05, 2007 2:38 pm

ok thanx anyway

Tural · Post by **Tural** » Mon Nov 05, 2007 2:39 pm

If you know the variable names (Look through the page source), and it was standard simple PHP, you could pass it like this:

forums.halomods.com/login.php?username=Tural&password=somepassword

What you'd need to know is what page it passes the variables to (login.php here) and the names of the variables (On the HTML form, the name of the inputs).

Voltage is wrong, for the most part. Some sites it may not be possible, but it is quite possible to do.

Actually, after reviewing, I notice this actually not working. I suppose it depends on the method used, and it needs to be defined as post, which I don't know you can do through the address bar.

sneakyn8 · Post by **sneakyn8** » Mon Nov 05, 2007 3:11 pm

what about javascript

Tural · Post by **Tural** » Mon Nov 05, 2007 3:16 pm

Uh... who uses Javascript for a login system..? That would be terribly insecure and wouldn't be practical if you have any real login system in place, utilizing a legitimate database.

sneakyn8 · Post by **sneakyn8** » Mon Nov 05, 2007 3:30 pm

.jsp means the website is java rite?

Sgt.Peppers · Post by **Sgt.Peppers** » Mon Nov 05, 2007 3:33 pm

sneakyn8 wrote:.jsp means the website is java rite?

Yes.

Tural · Post by **Tural** » Mon Nov 05, 2007 3:35 pm

Well I've never encountered any site that uses Javascript as a login system, nor can I imagine how it would be done efficiently. Google how to pass variables to it via URL.

patchesreusch · Post by **patchesreusch** » Mon Nov 05, 2007 3:41 pm

runescape mb?

Tural · Post by **Tural** » Mon Nov 05, 2007 3:46 pm

If it's a web app like that, then no, you can not. It's really only possible if the page itself is handling the variables.

sneakyn8 · Post by **sneakyn8** » Mon Nov 05, 2007 4:05 pm

im specifically talking about moola .com im trying to make an app that would go along with and i was going to make a button log you in if there are any other ways to do this in C# then please pm me

Tural · Post by **Tural** » Mon Nov 05, 2007 4:09 pm

Oh, that's simple.

Take the URL (Here, right click > Copy link location), add "&inUserName=" followed by the user's name (Which is their email address), then put "&inUserPass=" and their password. The full URL would be like this:

Code: Select all

https://www.moola.com:443/moopubs/login/index.jsp?ACTION_TOKEN=index_jsp$JspView$LoginAction&inUserName=john@john.com&inUserPass=johnspass

Just send that as a standard web request.

sneakyn8 · Post by **sneakyn8** » Mon Nov 05, 2007 4:10 pm

omg tural i love you(in a heterosexual way of course)