http commands & Passwords over WAN Advice

vwsplitty

Young grasshopper
Joined
Oct 21, 2015
Messages
78
Reaction score
20
Hi,

i have been playing around getting my BI set up to change profiles with a Http command, i have the below working over WAN/LAN to test but as its http sending the user and password in plain text is not a good idea.

the command i want to use is:
http://{domain.co.uk}:{port}/admin?profile=5&lock=2&user={usernamehere}&pw={passwordhere}

this changes the profile to 5 in this case and holds it until i change it again.

the only way i can first get this going is to uncheck the "use secure key and session key" in the advanced web server section as the above link will not get past the .login page- i have then to manually enter the details after then is does effect the change as required.

some questions:

1. does anyone know if i can use a http command like above that needs admin rights but still actually use the secure key option?

2. if i use stunnel will this give me https and will the above command still work over https?

3. if https is ok is the user and password part of the http string hidden/secure? i have read on a few sites that if the user and pw were before the domain it would still be sent as unsecured plain text but if after the domain name the user and pw are still sent as plain text but it is is side the https tunnel?

prior:
cURL & HTTP Request Help Required Alarm Intergration

thanks for any help
 

aesterling

Getting comfortable
Joined
Oct 9, 2017
Messages
352
Reaction score
346
Good questions. I'm looking at the same thing now three years later. Did you ever find a solution to this?
 

vwsplitty

Young grasshopper
Joined
Oct 21, 2015
Messages
78
Reaction score
20
Short answer no. In the end created a different account solely to login. Can keep an eye on the log in.
not perfect by any means by a means to an end. Also use stunnel.
 
Top