Ah true, didn't think of that. So then even with the Md5 hash if someone had access to my computer they could pull out my password from that link that was stored?
Also do you know another way to pass this data directly from a link in vbulletin? Im trying to pass this data to my outside forum, but the way i'm doing it is roundabout..
Link-->
PHP that will gather username/password put it into a form and POST it to -->
second PHP that will do my stuff
Using the insecure get method i can cut that down to 2 steps
Link (with info embedded into url) -->
Second PHP that will do my stuff
Is there another alternative that i'm missing that would be secure and be a 2 step process?
thanks!!
|