Bypass Filemaker iwp login via url

Here it comes the problem: I had to access a Filemaker Database shared via Instant Web Publish from a web app (a private area), without passing through the filemaker login (very ugly and another uname/password to digit/remember) but preserving security -> no guest account on DB.

It is possible to build an url to directly access the shared database, this way:

http://<filemaker_server_ip:port>/fmi/iwp/cgi?dbpath=
%2Ffmi%2Fiwp%2Fcgi%3F-db%3D<database_file_name>%26
-startsession
&amp;acct=account&amp;name=<username>
&amp;password=<password>&amp;login=Login&amp;-authdb

  • parameters to change are between <>
  • the middle part is the URL encoding of: “/fmi/iwp/cgi?db=<database_file_name>&-startsession”, for the table of URL encoding see here.

That’s all!

Share this post:
  • Print
  • Digg
  • StumbleUpon
  • del.icio.us
  • Facebook
  • Twitter
  • Google Buzz
  • LinkedIn
  • Tumblr
Posted mercoledì, luglio 14th, 2010 under Miscellaneous, Web Development.

Tags: ,

Leave a Reply