ansaurus

Question

Answer 1

+1 A:

If you login at least once -- maybe you could use JS or a client-side script to alter the existing cookie to expire later -- since you want forever, about 10 years should do the trick, haha.

henasraf 2010-02-24 13:23:00

Answer 2

+1 A:

I would give the "manager" person a real login in the system that provides a read-only view.

If the system can't do that, I'd recommend fixing the system... but it sounds like you are stuck with the system as is and can not alter it.

update(s): (updated again to do a post vs. get)

Based on the comments below, here's a basic sample of the insecure auto-login:

<html>
  <head>
    <title>CEO System Overview</title>
    <script>
      function autoLogin(){
        document.forms['auto'].submit();
      }
    </script>
  </head>
  <body onload="autoLogin();">
    <form name="auto" method="post" target="overview" action="fullpath/foobar.php/login.php/action/process">
      <input type="hidden" name="email_address" value="[email protected]"/>
      <input type="hidden" name="password" value="foobar"/>
    </form>
    <iframe name="overview" width="100%" height="100%" frameBorder="0"
      src="about:blank">
    </iframe>
  </body>
</html>

Notes:

This is insecure - any user of this PC/file can access the system
Navigation via the browser back/forward buttons may be a bit messed up (some browsers handle navigation within iframes better than others)

scunliffe 2010-02-24 13:24:13

I know I know but the ceo want a quickn dirty version.This is not possible

SurfingCat 2010-02-24 13:26:35

scunliffe 2010-02-24 13:38:44

Its a post login to a gambio webshop:<form id="login" action="https://www.foobar.php/login.php/action/process" method="post">

SurfingCat 2010-02-24 13:51:36

SurfingCat 2010-02-24 13:52:55

Does not work. I get only the login page.

SurfingCat 2010-02-24 19:35:56

ansaurus

tags:

views:

answers:

Always login Frame - HTML Cookies

related questions