Reputation: 821
I have a device that allows for remote control using something like this:
https://gooduser:[email protected]/webcallback?foo=bar
My question is, can I some how send an encrypted user/password so that end-users can't pull the username and password and login to the device?
My issue here is that I need these to be clickable links to send remote commands.
Upvotes: 1
Views: 130
Reputation: 395
Instead of putting your user nameand password in url, use HTML headers. Since you are calling https they will be encrypted. How you use it depends on your environment but using wget the command would be:
wget --user=gooduser --password=secretpassword https://www.example.com/webcallback?foo=bar
Upvotes: 2