Re: Re: Do you trim() usernames and passwords?

From: Date: Tue, 28 Dec 2010 20:02:23 +0000
Subject: Re: Re: Do you trim() usernames and passwords?
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-310275@lists.php.net to get a copy of this message
Trim usernames but not passwords. Some people put spaces at the beginning and end of their passwords. Double confirm and don't mess with the input otherwise they tend to get confused. Regards, -Josh ____________________________________ Joshua Kehn | Josh.Kehn@gmail.com http://joshuakehn.com On Dec 28, 2010, at 2:57 PM, Nathan Rixham wrote: > Dotan Cohen wrote: >> I seem to have an issue with users who copy-paste their usernames and >> passwords coping and pasting leading and trailing space characters. > > Don't trim or limit the range of input characters, but far more importantly /don't > send passwords in clear text/, indeed don't generate passwords at all, let users enter there > desired password, then they won't be copy and pasting them ;) > > ps: if unavoidable, then give some advice on "login" failure like "passwords are > case sensitive, check you don't have caps lock on and that you haven't included any > additional spaces". > > Best, > > Nathan > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php >

« previous php.general (#310275) next »