Re: https://httpd.apache.org/docs/2.4/mod/mod_auth_form.html

In the docs, I find the following as it related to Usernames and Passwords:

Note that form submission involves URLEncoding the form data: in this case the username and password. You should therefore pick usernames and passwords that avoid characters that are URLencoded in form submission, or you may get unexpected results.

Which characters are subject to URLEncoding? Is there a work-around?

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

In comp.infosystems.www.servers.unix, <djabrams57@gmail.com> wrote:

Re: https://httpd.apache.org/docs/2.4/mod/mod_auth_form.html

In the docs, I find the following as it related to Usernames and Passwords:

Note that form submission involves URLEncoding the form data: in this
case the username and password. You should therefore pick usernames and passwords that avoid characters that are URLencoded in form submission,
or you may get unexpected results.

Which characters are subject to URLEncoding?

https://www.ietf.org/rfc/rfc1738.txt
Section 2.2 answers in the opposite direction:

Thus, only alphanumerics, the special characters "$-_.+!*'(),", and
reserved characters used for their reserved purposes may be used
unencoded within a URL.

For the purposes of RFC1738 "alphanumerics" means ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789
(in ASCII). You needn't concern yourself with "what are the RFC1738
reserved characters?" because the reserved characters must be
encoded when not used for their reserved purposes, and usernames
and passwords are not ever reserved purposes.

Is there a work-around?

Handle login sessions in the http application ("cgi") instead of in the
http server ("apache").

The CGI layer can decode the URL encoding.

Elijah
------
thinks most people use accounts in the application

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

4LmA4Lih4Li34LmI4LitIOC4p+C4seC4meC4nuC4pOC4q+C4seC4quC4muC4lOC4teC4l+C4teC5 iCA4IOC4nuC4pOC4qOC4iOC4tOC4geC4suC4ouC4mSDguIQu4LioLiAyMDE4IDUg4LiZ4Liy4Lis 4Li04LiB4LiyIDQ1IOC4meC4suC4l+C4tSAwMSDguKfguLTguJnguLLguJfguLUgVVRDKzcsIGRq YWJyLi4uQGdtYWlsLmNvbSDguYDguILguLXguKLguJnguKfguYjguLI6DQo+IFJlOiBodHRwczov L2h0dHBkLmFwYWNoZS5vcmcvZG9jcy8yLjQvbW9kL21vZF9hdXRoX2Zvcm0uaHRtbA0KPiANCj4g SW4gdGhlIGRvY3MsIEkgZmluZCB0aGUgZm9sbG93aW5nIGFzIGl0IHJlbGF0ZWQgdG8gVXNlcm5h bWVzIGFuZCBQYXNzd29yZHM6DQo+IA0KPiBOb3RlIHRoYXQgZm9ybSBzdWJtaXNzaW9uIGludm9s dmVzIFVSTEVuY29kaW5nIHRoZSBmb3JtIGRhdGE6IGluIHRoaXMgY2FzZSB0aGUgdXNlcm5hbWUg YW5kIHBhc3N3b3JkLiBZb3Ugc2hvdWxkIHRoZXJlZm9yZSBwaWNrIHVzZXJuYW1lcyBhbmQgcGFz c3dvcmRzIHRoYXQgYXZvaWQgY2hhcmFjdGVycyB0aGF0IGFyZSBVUkxlbmNvZGVkIGluIGZvcm0g c3VibWlzc2lvbiwgb3IgeW91IG1heSBnZXQgdW5leHBlY3RlZCByZXN1bHRzLg0KPiANCj4gV2hp Y2ggY2hhcmFjdGVycyBhcmUgc3ViamVjdCB0byBVUkxFbmNvZGluZz8gSXMgdGhlcmUgYSB3b3Jr LWFyb3VuZD8NCg0KDQoNCuC5gOC4oeC4t+C5iOC4rSDguKfguLHguJnguJ7guKTguKvguLHguKrg uJrguJTguLXguJfguLXguYggOCDguJ7guKTguKjguIjguLTguIHguLLguKLguJkg4LiELuC4qC4g MjAxOCA1IOC4meC4suC4rOC4tOC4geC4siA0NSDguJnguLLguJfguLUgMDEg4Lin4Li04LiZ4Liy 4LiX4Li1IFVUQys3LCBkamFici4uLkBnbWFpbC5jb20g4LmA4LiC4Li14Lii4LiZ4Lin4LmI4Liy Og0KPiBSZTogaHR0cHM6Ly9odHRwZC5hcGFjaGUub3JnL2RvY3MvMi40L21vZC9tb2RfYXV0aF9m b3JtLmh0bWwNCj4gDQo+IEluIHRoZSBkb2NzLCBJIGZpbmQgdGhlIGZvbGxvd2luZyBhcyBpdCBy ZWxhdGVkIHRvIFVzZXJuYW1lcyBhbmQgUGFzc3dvcmRzOg0KPiANCj4gTm90ZSB0aGF0IGZvcm0g c3VibWlzc2lvbiBpbnZvbHZlcyBVUkxFbmNvZGluZyB0aGUgZm9ybSBkYXRhOiBpbiB0aGlzIGNh c2UgdGhlIHVzZXJuYW1lIGFuZCBwYXNzd29yZC4gWW91IHNob3VsZCB0aGVyZWZvcmUgcGljayB1 c2VybmFtZXMgYW5kIHBhc3N3b3JkcyB0aGF0IGF2b2lkIGNoYXJhY3RlcnMgdGhhdCBhcmUgVVJM ZW5jb2RlZCBpbiBmb3JtIHN1Ym1pc3Npb24sIG9yIHlvdSBtYXkgZ2V0IHVuZXhwZWN0ZWQgcmVz dWx0cy4NCj4gDQo+IFdoaWNoIGNoYXJhY3RlcnMgYXJlIHN1YmplY3QgdG8gVVJMRW5jb2Rpbmc/ IElzIHRoZXJlIGEgd29yay1hcm91bmQ/DQoNCg==

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)