hi,
a bit more tricky but helps for sure. set the field names to hashes that you
store in a matching table in the session and recompute every time you
generate the form. more hassle but also protects against scripting the login
form (what i used it for).

cheers
lenz

On Tue, Apr 14, 2009 at 9:25 AM, S.Mohammed Alsharaf
<[email protected]>wrote:

>  hi
>
> after the submition if there is error fill username field with the username
> but for the password word fields fill it with nothing.
>
> thats what i do and it works fine.
>
> if browser still showing the data then try to clear cache or redirect user
> to the page on error with header();. error message can be saved in session
> or url query
>
> hope this helps
> Mohammed Alsharaf
> http://www.safitech.com
>
>
> > Date: Tue, 14 Apr 2009 09:17:12 +1200
> > Subject: [phpug] How to control "Save password" functinality of browser
> on a change password screen
> > From: [email protected]
> > To: [email protected]
>
> >
> >
> > Hi,
> >
> > I think I have the following problem with a change password/upgrade
> > password screen:
> >
> > - User enters his username, old password and two copies of a new
> > password, submits
> > - Browser appears to save the new password
> > - System rejects new password due to quality,i.e. too short
> > - System shows form again, however now browser fills out old password
> > field with new - wrong- password
> > - User types in better password, but now gets rejected because of
> > wrong "old" password
> >
> > Can I control the password remember functionality of common browsers
> > here? Any workaround?
> >
> >
> > Kind Regards,
> >
> > Jochen Daum
> >
> > Chief Automation Officer
> > Automatem Ltd
> >
> > Phone: 09 630 3425
> > Mobile: 021 567 853
> > Email: [email protected]
> > Skype: jochendaum
> > Website: www.automatem.co.nz
> >
> > >
>


-- 
iWantMyName.com
painless domain registration (finally)

--~--~---------~--~----~------------~-------~--~----~
NZ PHP Users Group: http://groups.google.com/group/nzphpug
To post, send email to [email protected]
To unsubscribe, send email to
[email protected]
-~----------~----~----~----~------~----~------~--~---

Reply via email to