Actually, this is the default behavior (filling in form fields) with
or without the Auth component, so you'd have to unset any POST data
you didn't want to show up regardless.  However, the fact that the
Auth component hashes an empty value when no password is provided is
something worth considering making a change to.  If you want to open
an enhancement ticket I'll think about it.

On Apr 27, 6:55 pm, "b logica" <[EMAIL PROTECTED]> wrote:
> It's a Cake "feature", actually. Auth pre-hashes the password for you
> (which is fine) but it also fills in the password field (which is
> pointlessly dumb, IMHO [1]) if the page is reloaded. You need to unset
> $this->data['User']['password'] if the registration method did not
> succeed.
>
> Also, though, your password field should be type="password", not
> "text" (so, you shouldn't even be able to read the characters.
>
> [1], Which, yes, I know, the subject has been hashed (heh) over already enough
>
> On Sun, Apr 27, 2008 at 6:41 PM, Kyle Decot <[EMAIL PROTECTED]> wrote:
>
> >  I am making a register page for my website and am having a somewhat
> >  odd experience. If you do not enter any information and try to submit
> >  the form, the page reloads and the password field is filled with a
> >  random string as you can see here:
>
> >  http://www.theskateparkdirectory.com/register
>
> >  Does anyone know what is causing this?
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to