Forum Discussion
Preserving user name and password/passing variables
Hello All,
Is there any way to hold the user name/password values in a variable using IRules?
Can we pass a variable from IRule to another IRule?
ex)
When going from from http to https triggere...
hoolio
Cirrostratus
CirrostratusHi TRX,
The login page's form action is pointing to a local URI (/portal/site/partnercenter/template.LOGIN/action.process/). The web app is redirecting the POST via HTTP to the same URI via HTTPS. However, this isn't a secure method for accepting the user's credentials as the user has already submitted their username and password over HTTP. I suggest you change the page that contains the login form to use https. While you're changing the login form action, you could append the realm1 parameter as a hidden parameter when you redirect the user back to http.
Aaron
