1. Disable the cache for the login page in your <head>

<meta http-equiv="cache-control"
content="no-cache,no-store,must-revalidate,max-age=0">
<meta http-equiv="pragma" content="no-cache">

2. Set the default value for the sensitive fields to value=""

3. Add the autocomplete="off" attribute either to the fields you don't want
autocomplete, or to the entire form for all. (not HTML4 compliant)

Aaron


-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf
Of Brendan Brink
Sent: Wednesday, 29 September 2010 10:55 p.m.
To: [email protected]
Subject: [phpug] populating of login form

hi there all,

having an issue with a form that for some reason is saving the
username and password in the login fields...

i think it has something to do with an auto cookie: PHPSESSID

could someone please explain how to deal with this?

Obviously it is not a good safety feature having the username and
password default into the text box when there is no "REMEMBER ME"
feature...

i noticed that this only occurs when the URL : http://webpage.co.nz

and NOT when its http://www.webpage.co.nz

any guidance would be much appreciated :)

-- 
NZ PHP Users Group: http://groups.google.com/group/nzphpug
To post, send email to [email protected]
To unsubscribe, send email to
[email protected]

-- 
NZ PHP Users Group: http://groups.google.com/group/nzphpug
To post, send email to [email protected]
To unsubscribe, send email to
[email protected]

Reply via email to