Is it wise to use htmlEditFormat() on the value of password fields?
 
It is allowed for a user to enter "&" as part of their password.
 
However, if I use htmlEditFormat(form.password) as the value of a
password field, it will escape it to "&".
 
Therefore a password may end up being "Mike&Becky" rather than
"Mike&Becky".
 
As such, should you use htmlEditFormat() on username fields as well?
 
Thanks!
 
Michael Dawson
Manager of Web Applications
Office of Technology Services
University of Evansville
 
Each time you send an email message with a background pattern
or loud background color, an endangered tree dies.
Please help us save a tree. Just say "NO" to email backgrounds.
 


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:323977
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to