PDFPop allows the passage of a user name and a password to the Pdfpop.aspx page. These are the pages that are being accessed in any PDFPop query, but normally the user would have to authenticate before seeing the page. This method allows authentication information to be passed in on the string, thereby allowing direct access to the query results. In the Web Server's Web.config file, the Hyland.Web.PdfPop enableHTTPLogin option should be set to true with all other logon options false. The method for doing this is to add items to the query string generated by the DocPopurlcreator.aspx page:
username
password
A portion of the query string for a user named “ PDFPop USER” with a password of “ PDFPop PASSWORD” would look something like this:
…pdfpop.aspx?username=PDFPopUSER&password=PDFPopPASSWORD&…
The username and the password are passed as clear text when used in this manner.