DocPop allows the passage of a user name and a password to the Docpop.aspx page. These are the pages that are being accessed in any DocPop query, but normally the user would have to authenticate before seeing the page. This method allows authentication information to be passed in on the string, thereby allowing direct access to the query results. In the Web Server's Web.config file, the Hyland.Web.DocPop enableHTTPLogin option should be set to true with all other logon options false. The method for doing this is to add items to the query string generated by the DocPopurlcreator.aspx page:
username
password
A portion of the query string for a user named “ DocPop USER” with a password of “ DocPop PASSWORD” would look something like this:
… docpop.aspx?username=DocPop USER&password=DocPop PASSWORD&…
The username and the password are passed as clear text when used in this manner.