Re: Re: Do you trim() usernames and passwords?
| From: | Dotan Cohen | Date: | Tue, 28 Dec 2010 20:25:50 +0000 |
| Subject: | Re: Re: Do you trim() usernames and passwords? | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-310285@lists.php.net to get a copy of this message | ||
On Tue, Dec 28, 2010 at 22:23, Peter Lind <peter.e.lind@gmail.com> wrote:
> Sounds like https would be MUCH simpler and likely as safe or safer. I
> wouldn't waste my time on trying to come up with very clever schemes
> when tried and true technologies are out there.
>
You are right, I know.
>> But before all that goes on, I have to decide what to do about leading
>> and trailing spaces.
>
> As has been noted a couple of times: trim usernames. Never trim passwords.
>
I think that is right. I needed that push. Thanks.
--
Dotan Cohen
http://gibberish.co.il
http://what-is-what.com