Re: hiding password in Custom command

[Jamie C. <jca...@we...>]

jec...@ca... wrote:
> 
> Hi.
>      I would like to know if it is possible to remove a parameter in the
> URL address bar of internet explorer. Here is my problem. I made a custom
> command that take 2 parameters : a username and a password. My first
> problem was solved by editing the /usr/libexec/webmin/custom/lang/en file
> and removing the entry to the run_out string. The password was display at
> each execution. But now, I just found out that even if * are replacing my
> password while I type it, my password is written in the address bar of
> Internet Explorer.
> 
> Here is the address bar content, when I run the script :
> 
> http://ip_address:10000/module-name/run.cgi?idx
> =&username=my-username&password=the-passwordItyped.
> 
> For example, if my password is : helloall, the string will appear directly
> in the address bar.
> 
> Is there any way to hide it?

Try editing custom/index.cgi and changing line 27 to :

print "<form action=run.cgi method=post>\n";

Come to think of it, I might as well make that the default in future
versions of webmin.

 - Jamie