Re: Re: Do you trim() usernames and passwords?

Joshua Kehn wrote:

Trim usernames but not passwords.

agree. nice catch, I was thinking about passwords specifically and forgot usernames was in the topic too!

On Dec 28, 2010, at 2:57 PM, Nathan Rixham wrote:

Dotan Cohen wrote:

I seem to have an issue with users who copy-paste their usernames and passwords coping and pasting leading and trailing space characters.

Don't trim or limit the range of input characters, but far more importantly /don't send passwords in clear text/, indeed don't generate passwords at all, let users enter there desired password, then they won't be copy and pasting them ;) ps: if unavoidable, then give some advice on "login" failure like "passwords are case sensitive, check you don't have caps lock on and that you haven't included any additional spaces". Best, Nathan -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php