mariovaldez.net

MV.net forums
It is currently 14 Jul 2016, 01:01

All times are UTC - 7 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 
Author Message
PostPosted: 28 Jul 2007, 14:13 
Hi All. I have installed OSCPMWin 0.4.1.683 and SSL 0.9.6k and can connect successfully to oscpm1_upload.php with my browser. Using OSCPMWin however, an ERROR 100 is the result. The person who runs this - external - site (to which I have limited access) has looked into it and says that this is because the (https) site is protected with a userid and password and OSCPMWin does not support that. Does anyone know of a patch that allows me to specificy (hard coded if necessary) the userid and password for the site IN ADDITION to those for the database?


Report this post
Top
  
Reply with quote  
PostPosted: 28 Jul 2007, 15:55 
User avatar

Joined: 06 Mar 2003, 03:21
Posts: 447
Location: Monterrey, NL, Mexico
Rick:

> Hi All. I have installed OSCPMWin 0.4.1.683 and SSL 0.9.6k and
> can connect successfully to oscpm1_upload.php with my browser.
> Using OSCPMWin however, an ERROR 100 is the result. The person
> who runs this - external - site (to which I have limited access)
> has looked into it and says that this is because the (https) site is
> protected with a userid and password and OSCPMWin does not
> support that. Does anyone know of a patch that allows me to specificy
> (hard coded if necessary) the userid and password for the site
> IN ADDITION to those for the database?

Hi. Currently, there is no way to specify a HTTP Basic Authentication password and username to access the server-side script. It can be done. I will add it soon. (In my bugtracker this issue is Bug #348).


You have said that you have not control over the server, so this note is for anybody else who may be thinking on setting HTTP authentication on the server-side script. Adding HTTP Basic authentication to access the server-side script does not provide more security to the script, as the HTTP username and password are really sent in clear text and the OSCPMWin authentication data is sent encrypted. Even HTTP Digest authentication is not better, as the server-side script authentication is similar (it may be slightly better, as the nonce is set by the server, and in the OSCPMWin application is set by the client). However, HTTP Basic authentication over SSL (as you do) is better (but redundant for the oscpm1_upload script).


Regards,

Mario A. Valdez-Ramirez.


Report this post
Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: 29 Jul 2007, 00:47 
Thanks for your quick response. I will eagerly be holding my breath... :-)


Report this post
Top
  
Reply with quote  
 Post subject: ERROR 100
PostPosted: 30 Jul 2007, 10:40 
Hi,

I have the same problem ERROR 100. I am succesfully able to connect to the script url but whenever I try and connect I get the error. I am not behind any proxy.

I've checked everything but nothing I try seems to work. This is the second shop management software I have used but neither seems to work, which is a real shame.

If you can offer any advice, please email me at chris@edgarsview.co.uk.

Kind Regards,

Chris


Report this post
Top
  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 

All times are UTC - 7 hours


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group