Re: Re: Do you trim() usernames and passwords?
| From: | Joshua Kehn | Date: | Tue, 28 Dec 2010 20:11:56 +0000 |
| Subject: | Re: Re: Do you trim() usernames and passwords? | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-310278@lists.php.net to get a copy of this message | ||
Specifically:
>> Dotan Cohen wrote:
>>> I seem to have an issue with users who copy-paste their usernames and
>>> passwords coping and pasting leading and trailing space characters.
Users should not be copy-pasting passwords or usernames. Do not compromise a system to cater to bad
[stupid, ignorant, you pick] users. If this is an issue then educate the users.
Regards,
-Josh
____________________________________
Joshua Kehn | Josh.Kehn@gmail.com
http://joshuakehn.com
On Dec 28, 2010, at 3:07 PM, Nathan Rixham wrote:
> Joshua Kehn wrote:
>> Trim usernames but not passwords.
>
> agree. nice catch, I was thinking about passwords specifically and forgot usernames was in the
> topic too!
>
>
>> On Dec 28, 2010, at 2:57 PM, Nathan Rixham wrote:
>>> Dotan Cohen wrote:
>>>> I seem to have an issue with users who copy-paste their usernames and
>>>> passwords coping and pasting leading and trailing space characters.
>>> Don't trim or limit the range of input characters, but far more importantly
>>> /don't send passwords in clear text/, indeed don't generate passwords at all, let users
>>> enter there desired password, then they won't be copy and pasting them ;)
>>>
>>> ps: if unavoidable, then give some advice on "login" failure like
>>> "passwords are case sensitive, check you don't have caps lock on and that you haven't
>>> included any additional spaces".
>>>
>>> Best,
>>>
>>> Nathan
>>>
>>> --
>>> PHP General Mailing List (http://www.php.net/)
>>> To unsubscribe, visit: http://www.php.net/unsub.php
>>>
>