Groups | Blog | Home
all groups > iis ftp > august 2004 >

iis ftp : Passwords containing @ access IIs6 FTP site



Tom
8/30/2004 1:39:55 PM
When my user attempts to access a passworded FTP site on
my IIS6 server, the URL gets modified to include some of
her password characters. Here is an example

using IE userid Tom tries to access
ftp://ftp.somewhere.com with the password 1234@5678 the
URL gets changed to 5678@ftp.somewhere.com and of course
that resource cannot be identified.

Has anyone else see this or a variant of it?

Thanks
Tom
Tom
8/30/2004 3:53:48 PM
Actually we are prompting already (does not help), as for
the plain text its a small intranet site with no access to
the outside world. My problem is a user who likes password
complexity and I would rather not tell her she can not use
character like the @ in her password. Any other Ideas?

Thanks


[quoted text, click to view]
Dave
8/30/2004 9:08:35 PM
the @ is used as the delimiter between the username and password and the
server address in cases like that so of course passwords with @'s are going
to confuse it. so would some other characters like a : which also causes
the url to be corrupted.

[quoted text, click to view]

Dave
8/30/2004 9:11:07 PM
p.s. my recommendation is to leave out the username/password on the url and
let ie prompt you for it, that should always work but is less convenient.
of course passwords to ftp sites are sent in plain text anyway so its
probably ok to relax the password requirements for them to just use letters
and numbers but not symbols.

[quoted text, click to view]

alunj NO[at]SPAM online.microsoft.com (
8/31/2004 4:35:50 PM
[quoted text, click to view]

This is really a question that should be asked of the Internet Explorer
groups, as the server has no control over this behaviour. It is purely an
issue of how the browser handles content in the URL that should be quoted
to avoid being drawn out as part of the site name.

Alun.
~~~~
AddThis Social Bookmark Button