mariovaldez.net
http://www.mariovaldez.net/webapps/forums/

ERROR 100 on OSC site protected with userid and password
http://www.mariovaldez.net/webapps/forums/viewtopic.php?f=12&t=798
Page 1 of 1

Author:  Rick [ 28 Jul 2007, 14:13 ]
Post subject:  ERROR 100 on OSC site protected with userid and password

Hi All. I have installed OSCPMWin 0.4.1.683 and SSL 0.9.6k and can connect successfully to oscpm1_upload.php with my browser. Using OSCPMWin however, an ERROR 100 is the result. The person who runs this - external - site (to which I have limited access) has looked into it and says that this is because the (https) site is protected with a userid and password and OSCPMWin does not support that. Does anyone know of a patch that allows me to specificy (hard coded if necessary) the userid and password for the site IN ADDITION to those for the database?

Author:  mvaldez [ 28 Jul 2007, 15:55 ]
Post subject:  HTTP basic authentication...

Rick:

> Hi All. I have installed OSCPMWin 0.4.1.683 and SSL 0.9.6k and
> can connect successfully to oscpm1_upload.php with my browser.
> Using OSCPMWin however, an ERROR 100 is the result. The person
> who runs this - external - site (to which I have limited access)
> has looked into it and says that this is because the (https) site is
> protected with a userid and password and OSCPMWin does not
> support that. Does anyone know of a patch that allows me to specificy
> (hard coded if necessary) the userid and password for the site
> IN ADDITION to those for the database?

Hi. Currently, there is no way to specify a HTTP Basic Authentication password and username to access the server-side script. It can be done. I will add it soon. (In my bugtracker this issue is Bug #348).


You have said that you have not control over the server, so this note is for anybody else who may be thinking on setting HTTP authentication on the server-side script. Adding HTTP Basic authentication to access the server-side script does not provide more security to the script, as the HTTP username and password are really sent in clear text and the OSCPMWin authentication data is sent encrypted. Even HTTP Digest authentication is not better, as the server-side script authentication is similar (it may be slightly better, as the nonce is set by the server, and in the OSCPMWin application is set by the client). However, HTTP Basic authentication over SSL (as you do) is better (but redundant for the oscpm1_upload script).


Regards,

Mario A. Valdez-Ramirez.

Author:  Guest [ 29 Jul 2007, 00:47 ]
Post subject: 

Thanks for your quick response. I will eagerly be holding my breath... :-)

Author:  Guest [ 30 Jul 2007, 10:40 ]
Post subject:  ERROR 100

Hi,

I have the same problem ERROR 100. I am succesfully able to connect to the script url but whenever I try and connect I get the error. I am not behind any proxy.

I've checked everything but nothing I try seems to work. This is the second shop management software I have used but neither seems to work, which is a real shame.

If you can offer any advice, please email me at chris@edgarsview.co.uk.

Kind Regards,

Chris

Page 1 of 1 All times are UTC - 7 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/