Sending pwd= in URL

[xboxbob]

Hi

Is there any security issues of sending a password in a URL for viewing live lists in MLM?

ie - will this be picked up in AWSTATS or google for instance - or is this safe?

Thanks

 

[stanbusk]

Yes, there is a security issue. Do not share that password since it is the same that allows to run all the commands in MLM.

 

[xboxbob]

HI

Thanks, I wasnt meaning to pass the password on - I was more concerned about our server stats program AWSTATS picking up the URL and listing it as a viewed page.

I have checked the AWSTATS report since original posting - and can confirm the password is NOT listed on there.