[development] Re: [drupal-devel] Securing Login: MD5 password hashing using javascript

Darrel O'Pry dopry at thing.net
Wed Nov 9 19:04:49 UTC 2005


On Wed, 2005-11-09 at 20:14 +0200, Adrian Rossouw wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> On 09 Nov 2005, at 7:42 PM, Darrel O'Pry wrote:
> > Well here you go... its a bit of a kludge, but works.
> > patched url() and l() to have an ssl flag...
> 
> I still think we should drop the 'external url' and / or 'ssl'  
> qualifiers
> ( ) and then you can just make an alias for 'user/login' to https:// 
> mysite.com/user/login'
> 
> It's less places to change the code, as we already have a way to  
> replace urls.would also be a useful way for networks of sites to  
> configure their
> central login site.

Khalid: 

I wanted to post it here before I put it in as an issue to see if there
were better recommendations/approaches.

Adrian: 

There is already a way to replace urls? Does Url Alias / path.module
handle rewriting to absolute Urls?




More information about the development mailing list