[PHP] Self-filling login form

2003-04-03 Thread Alberto Brea
A question please:
I have a login form on (PHP 4.3.1 and Apache 1.3.27). When I click inside
the ID box, you can glimpse at some of the user IDs inside it for a fraction
of a second (similar to a drop-down menu), which shows an unauthorized
visitor some of the id values.
Worst of all, when you enter your ID the password automatically fills in,
giving free access to the unauthorized user.
Does anybody know why this happens? Something in the php.ini or httpd.conf
files perhaps?
Thanks for any comment

Alberto Brea


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Self-filling login form

2003-04-03 Thread David T-G
Alberto --

...and then Alberto Brea said...
% 
% A question please:
% I have a login form on (PHP 4.3.1 and Apache 1.3.27). When I click inside
...
% Does anybody know why this happens? Something in the php.ini or httpd.conf
% files perhaps?

Almost certainly not without seeing some code.


% Thanks for any comment


HTH  HAND

:-D
-- 
David T-G  * There is too much animal courage in 
(play) [EMAIL PROTECTED] * society and not sufficient moral courage.
(work) [EMAIL PROTECTED]  -- Mary Baker Eddy, Science and Health
http://justpickone.org/davidtg/  Shpx gur Pbzzhavpngvbaf Qrprapl Npg!



pgp0.pgp
Description: PGP signature


Re: [PHP] Self-filling login form

2003-04-03 Thread CPT John W. Holmes
 A question please:
 I have a login form on (PHP 4.3.1 and Apache 1.3.27). When I click inside
 the ID box, you can glimpse at some of the user IDs inside it for a
fraction
 of a second (similar to a drop-down menu), which shows an unauthorized
 visitor some of the id values.
 Worst of all, when you enter your ID the password automatically fills in,
 giving free access to the unauthorized user.
 Does anybody know why this happens? Something in the php.ini or httpd.conf
 files perhaps?
 Thanks for any comment

This is a browser feature. Look through the browser options for a way to
turn it off. It's not related to Apache or PHP.

---John Holmes...


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



RE: [PHP] Self-filling login form

2003-04-03 Thread LeTortorec, Jean-Louis
A few days ago, I found a way to stop the autocomplete feature. It's more
html coding that php actually.

Try form action= Method=post autocomplete='OFF'

Jean-Louis


 
Jean-Louis 



-Original Message-
From: Alberto Brea [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 03, 2003 10:33 AM
To: [EMAIL PROTECTED]
Subject: [PHP] Self-filling login form


A question please:
I have a login form on (PHP 4.3.1 and Apache 1.3.27). When I click inside
the ID box, you can glimpse at some of the user IDs inside it for a fraction
of a second (similar to a drop-down menu), which shows an unauthorized
visitor some of the id values. Worst of all, when you enter your ID the
password automatically fills in, giving free access to the unauthorized
user. Does anybody know why this happens? Something in the php.ini or
httpd.conf files perhaps? Thanks for any comment

Alberto Brea


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Self-filling login form

2003-04-03 Thread Henrik Hudson
On Thursday 03 April 2003 09:33, Alberto Brea wrote:
 A question please:
 I have a login form on (PHP 4.3.1 and Apache 1.3.27). When I click inside
 the ID box, you can glimpse at some of the user IDs inside it for a
 fraction of a second (similar to a drop-down menu), which shows an
 unauthorized visitor some of the id values.
 Worst of all, when you enter your ID the password automatically fills in,
 giving free access to the unauthorized user.
 Does anybody know why this happens? Something in the php.ini or httpd.conf
 files perhaps?
 Thanks for any comment

 Alberto Brea

Yeah, this is a IE and newer Mozilla browser feature. Nothing to do with 
Apache or PHP. 

You can turn it off in IE by doing Tools - Internet Options - Content tab 
and then clicking on the AutoComplete button. 

In Mozila, Edit - Preferences - PrivacySecurity - Forms and also Passwords 
and uncheck the checkboxes.


Henrik

-- 
Henrik Hudson
[EMAIL PROTECTED]

`If there's anything more important than my ego
around, I want it caught and shot now.' 
--Hitchhikers Guide to the Galaxy

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php