如何通过url传递username和pwd登录phpbb软件

Question

I have installed the phpbb software and i am new to it, if a user access the forum via url like http://192.168.1.162/payodatalk/service/login.php?mode=login&username=uname&pwd=123

 Where can i find the session variables like user name and password initialized ? i have referred the PHPBB site but still i am not clear about it. Any help on this would be useful for me.

thanks in advance

Answer 1

You should not allow authentication through GET request, since the requests would not be idempotent (cfr Hypertext Transfer Protocol - Method definitions).

However, to allow this you should modify phpBB's login function to fetch username and password from the $_GET supervariable instead of $_POST only (you should check $_GET if $_POST does not contain username and password, do not replace the $_POST entirely).