Re: Re: Do you trim() usernames and passwords?

From: Date: Tue, 28 Dec 2010 20:11:56 +0000
Subject: Re: Re: Do you trim() usernames and passwords?
References: 1 2 3 4  Groups: php.general 
Request: Send a blank email to php-general+get-310278@lists.php.net to get a copy of this message
Specifically: >> Dotan Cohen wrote: >>> I seem to have an issue with users who copy-paste their usernames and >>> passwords coping and pasting leading and trailing space characters. Users should not be copy-pasting passwords or usernames. Do not compromise a system to cater to bad [stupid, ignorant, you pick] users. If this is an issue then educate the users. Regards, -Josh ____________________________________ Joshua Kehn | Josh.Kehn@gmail.com http://joshuakehn.com On Dec 28, 2010, at 3:07 PM, Nathan Rixham wrote: > Joshua Kehn wrote: >> Trim usernames but not passwords. > > agree. nice catch, I was thinking about passwords specifically and forgot usernames was in the > topic too! > > >> On Dec 28, 2010, at 2:57 PM, Nathan Rixham wrote: >>> Dotan Cohen wrote: >>>> I seem to have an issue with users who copy-paste their usernames and >>>> passwords coping and pasting leading and trailing space characters. >>> Don't trim or limit the range of input characters, but far more importantly >>> /don't send passwords in clear text/, indeed don't generate passwords at all, let users >>> enter there desired password, then they won't be copy and pasting them ;) >>> >>> ps: if unavoidable, then give some advice on "login" failure like >>> "passwords are case sensitive, check you don't have caps lock on and that you haven't >>> included any additional spaces". >>> >>> Best, >>> >>> Nathan >>> >>> -- >>> PHP General Mailing List (http://www.php.net/) >>> To unsubscribe, visit: http://www.php.net/unsub.php >>> >

« previous php.general (#310278) next »