I guess the developer didn’t really understand how hidden fields really behaved.
1. Right click, View Source.
2. Awesome. I saw all the values in raw text.
<INPUT TYPE=”HIDDEN” NAME=”s_id” VALUE=”[usernName]”>
<INPUT TYPE=”HIDDEN” NAME=”ControlSessionID” VALUE=”[actualSID]”>
<INPUT TYPE=”HIDDEN” NAME=”url” VALUE=”http://[serverLocation]”>
<INPUT TYPE=”HIDDEN” NAME=”RootName” VALUE=”/”>
<INPUT TYPE=”HIDDEN” NAME=”DataConn_ConnectionString” VALUE=”Provider=[providerName];Data Source=[sourceName]”>
<INPUT TYPE=”HIDDEN” NAME=”Library” VALUE=”[libraryName]”>
<INPUT TYPE=”HIDDEN” NAME=”DataConn_RuntimeUserName” VALUE=”[userName]”>
<INPUT TYPE=”HIDDEN” NAME=”DataConn_RuntimePassword” VALUE=”[password]”>
<INPUT TYPE=”HIDDEN” NAME=”Development_Mode” VALUE=”N”>
<INPUT TYPE=”HIDDEN” NAME=”ViewableLocations” VALUE=”All”>
<INPUT TYPE=”HIDDEN” NAME=”ViewableRegions” VALUE=”All”>
i was about to say it was ok.. then i saw username/password in there…
wow..