Re: LoginMD5.pm (Perl/CGI - Javascript User Authentication)

On Sun, 25 Aug 2002 12:05:07 -0400, [email protected] (Zentara)
wrote:

>However, I've found a glitch in your program.
>
>>Anyways, I see the login password  when I watch
>the transaction with ethereal. Below is a sample
>ethereal dump, and it shows my password "ztest"
>being sent. I  have debug mode = 0, so it isn't debug
>

In all fairness to the author, I downloaded the latest version,
and it does indeed work. It hides the password from being
sent in clear text.

.ý÷Cont ent-Type
: applic ation/x-
 www-form -urlenco
 ded..Con tent-Len
 gth: 147 ....user
 =zentara &passwor
 d=fb4579 6592947f
 bc7d92bc 2b08e0d8
 92&hash= fb457965
 92947f6c 7d92bc2b
 08e0d892 &session
 =00ff59b 396ac459
 d7298b22 790dc2f3
 4&Submit =Submit