473,670 Members | 2,298 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

IE form post oddness

I'm trying to POST from a form a simple username and password onto
another website. Firefox and Opera post the data and results are
returned successfully. The site returns "missing user id and password"
when using the same form in Internet Explorer. This form works fine as
a GET, but I want to avoid this route. The site I'm posting to is
fairly closed and I'm not sure if I can get at the perl/c/whatever they
are using to check out the source. Anyone have a clue as to why IE is
misbehaving or the other browsers are breaking standards and actually
working?

<form name="accessfor m" method="post"
action="http://site/uhtbin/cgisirsi/0/0/30">
<input type="hidden" value="user" name="user_id" />
<input type="hidden" value="password " name="password" />
<p><input type="submit" value="Submit"> </p>
</form>

TIA.

Sep 13 '06 #1
6 2908
ja*******@gmail .com wrote:
I'm trying to POST from a form a simple username and password onto
another website. Firefox and Opera post the data and results are
returned successfully. The site returns "missing user id and password"
when using the same form in Internet Explorer. This form works fine as
a GET, but I want to avoid this route.
What type of file are you expecting to get in return? IE has a "feature"
(at least older versions did) that may require you to use GET. This
"feature" crops up when the server is generating a file type other than
an HTML or plain text file, and needs the form data to create the file.

I won't comment on the security issue of putting a password in a hidden
field. I'll assume you already know that, or that you have a good reason
to do that.
Sep 13 '06 #2
Scott Bryce wrote:
What type of file are you expecting to get in return? IE has a "feature"
(at least older versions did) that may require you to use GET. This
"feature" crops up when the server is generating a file type other than
an HTML or plain text file, and needs the form data to create the file.

I won't comment on the security issue of putting a password in a hidden
field. I'll assume you already know that, or that you have a good reason
to do that.
It is outputting html. I replicated the form that is used on the web
site that is returning the data and it functions fine in IE. It is
only when I move the form to another webserver and have it try to get
results that I run into problems with just IE.

I'm not too concerned with the user going to view source and seeing the
hidden inputs, they are only seeing their actual id and pin, not
somethign system wide. I just want to avoid using GET so that the user
id and password doesn't end up in the cache. A lot of the traffic for
this web site is from shared computers.

Sep 14 '06 #3
ja*******@gmail .com <ja*******@gmai l.comscripsit:
<form name="accessfor m" method="post"
action="http://site/uhtbin/cgisirsi/0/0/30">
It's surprising that you claim that the form works on some browsers, given
the fact that the URL in the action attribute isn't even syntactically
correct, due to the malformed server part.

--
Jukka K. Korpela ("Yucca")
http://www.cs.tut.fi/~jkorpela/

Sep 14 '06 #4

Jukka K. Korpela wrote:
ja*******@gmail .com <ja*******@gmai l.comscripsit:
<form name="accessfor m" method="post"
action="http://site/uhtbin/cgisirsi/0/0/30">

It's surprising that you claim that the form works on some browsers, given
the fact that the URL in the action attribute isn't even syntactically
correct, due to the malformed server part.

--
Jukka K. Korpela ("Yucca")
http://www.cs.tut.fi/~jkorpela/
I just shortened the fairly long server address to site, the
/uhtbin/cgisirsi/0/0/30 directory is correct though. There is no file
extension for whatever scripts the server is processing.

Sep 14 '06 #5
I don't know if this has anything to do with your problem, but I'll
describe IE's "feature" just in case this helps.

In the early days of the internet, not all servers sent the correct file
type headers for all file types. Of course, the correct solution to the
problem is to fix the servers. That has since happened. But in the mean
time, Microsoft added a Band-Aid to IE. When IE requests a file from the
server, it asks for only a portion of the file. When it gets this
portion, IE examines the content to determine what type of file it is.
IE may decide that the file type is different than the type specified in
the headers.

But here is where the "feature" comes in. IE will then make a second
request to the server for the entire file. If you are sending POST data
to the server, the POST data is not sent with this second request. GET
data is sent, since it is part of the URL. When you think about it, you
wouldn't want POST data sent a second time, since POST is supposed to be
used when the POSTed data will change the server state. Sending it a
second time could mess up data on the server. It would be sorta like
everybody clicking your submit button twice.

So if the content that is sent to the browser is determined by the data
sent to the server, you can't use POST. By the time IE sends a real
request for the content to the server, the POST data has been lost.

I know this was true for IE versions up to 5.x. I don't know if current
versions of IE still do this.

There may be exceptions to this, but I don't remember enough details to
know for sure.

Almost 3 years ago I was bit by this feature. My site generates PDF
files based on data sent to the server. I do most of my testing using
Netscape Navigator. When the site went live, I was unaware the site did
not work for IE users, until I started getting emails from them. It took
a full day to research the problem. I finally figured out what was
happening after finding a related article in the knowledge base at
msdn.com, (I can't find that article now) and noticing that my server
logs showed two requests to the server every time the submit button was
clicked by someone using IE. The solution was to change all my POSTs to
GETs.
Sep 15 '06 #6
I just can't seem to figure out why it functions correctly when using
the form on the server of the target website, but not when I replicate
the form and put it on another webserver.

Original form is at
http://sirsi.altoonalibrary.org:8080.../0/0/29/48/X/1
-Using test as user id and test as pin; IE, Firefox and Opera all
return access denied, which they should.

Test form is at
http://www.altoonalibrary.org/sandbo...st_oddness.htm
-Firefox and Opera return access denied.
-IE returns missing user id or alt id.

Sep 15 '06 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
4253
by: TG | last post by:
Dear PHP Group, I have two forms that are used to collect user information. The first one takes user inputted values such as fullname, city, address etc. I want these values to display in the second form when it is called. Both forms are .htm files that call themselves when the submit button is press via the following command in each form: <form method="post" action="<?php $server?>">
3
3533
by: sammmista | last post by:
hello experts, Plz dont treat this as another newbie query , i did my homework but still getting nowhere :( :( :( Trying to learn PHP on Fedora core 1 (PHP 4.3,MySQL,HTTPD).Unable to post data from html form to php file(connecting to mysql database and inserting into a table) . This seemingly simple problem is making me go mad !!! I googled extensively and already tried the following
3
5383
by: Harvey | last post by:
Hi, I try to write an asp query form that lets client search any text-string and display all pages in my web server that contain the text. I have IIS 6.0 on a server 2003. The MSDN site says there is a sample file called Ixtrasp.asp, but I could not find it in my system although I installed indexing service. I followed the steps in MSDN site to create a basic .asp query form (too long to post it here), but it always displays: No...
5
2449
by: Paxton | last post by:
I created an html email containing a form whose method is POST. The form is posted to an asp page for processing, but no values are retrieved. So I response.write all the Request.Form fields, and nothing appears. I change the form's method to GET, then response.write the Request.QueryString items (which I can see in the URL) and it works fine. I need to use POST, as the quantity of data from the form will often exceed the limits of...
10
2898
by: Noozer | last post by:
Below is some ASP, HTML and javascript. It is part of a page used to maintain a small database. This code did work at one time, but has since stopped. For some reason the data on my form is not being passed to the page specified in the Action property of the form. This is on a Windows 2000 Pro PC. I copied the code to another server (Windows XP Pro machine) and it DOES work as expected there. The first block is the data located near...
3
1790
by: John Abel | last post by:
Hi, I'm running Python 2.3.5/2.4.2 on OSX 10.4.2, and am trying to run CGI scripts using the builtin Apache. For ease, I've symlinked my custom modules into the /Library/Python/2.3/site-packages directory, and they import OK via command line python. However, when I perform the import from a cgi script, python fails to find the module. It is definately something to do with the symlink, as the CGI works OK if I copy the directory into...
10
4942
by: Drakier Dominaeus | last post by:
This is my first time posting here, so please forgive me if I do anything incorrectly. I've been learning C# and working with different things and decided I wanted to get into Multi-Threading. My problem is that I must not be doing it right because only some of the stuff works as would be expected. I'll post what exactly is happening, then I'll post the sample code I'm using that is giving me the problems. I'm sure its something I've...
8
5076
by: Gert | last post by:
Hi, I have a form (server side) because of the filling of variables through the application. But now I need to post it to an url on submit. My .HTML form looks like this, but how to translate it to asp.net vb code? !--<FORM ACTION="/test/test.php" METHOD=POST>--> <form action="https://multipay.net/transaction/mpmain.php" method="post"> ....
1
1506
by: cedarmillxing215 | last post by:
The oddness is on the last line of code. This is stripped down as far as I could figure, and I provide several similar examples that work as expected. I have no idea whether this is a compiler bug or my not understanding how the << overload is chosen. -Chris -------------------- #include <iostream>
0
8469
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8386
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
8903
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
1
8592
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
8661
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
1
6213
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
4391
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
2800
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
1794
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.