Re: Re: Do you trim() usernames and passwords?
| From: | Paul M Foster | Date: | Tue, 28 Dec 2010 23:28:56 +0000 |
| Subject: | Re: Re: Do you trim() usernames and passwords? | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-310303@lists.php.net to get a copy of this message | ||
On Tue, Dec 28, 2010 at 03:11:56PM -0500, Joshua Kehn wrote:
> Specifically:
>
> >> Dotan Cohen wrote:
> >>> I seem to have an issue with users who copy-paste their usernames and
> >>> passwords coping and pasting leading and trailing space characters.
>
> Users should not be copy-pasting passwords or usernames. Do not compromise a system to cater to
> bad [stupid, ignorant, you pick] users. If this is an issue then educate the users.
>
Wrong. I use a program called pwgen to generate passwords for me, which
I cannot remember. I use another program I built to store them in an
encrypted file. When I have to supply a password which I've forgotten
(as usual), I fire up my password "vault", find the password, and paste
it wherever it's needed. Users would be wise to follow a scheme like
this, rather than using their dog's name or somesuch as their passwords.
Paul
--
Paul M. Foster
http://noferblatz.com