Re: Re: Do you trim() usernames and passwords?
| From: | David Harkness | Date: | Wed, 29 Dec 2010 00:46:54 +0000 |
| Subject: | Re: Re: Do you trim() usernames and passwords? | ||
| References: | 1 2 3 4 5 6 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-310304@lists.php.net to get a copy of this message | ||
On Tue, Dec 28, 2010 at 3:28 PM, Paul M Foster <paulf@quillandmouse.com>wrote:
> Users would be wise to follow a scheme like
> this, rather than using their dog's name or somesuch as their passwords.
Aww man, I've been using "somesuch" as the password for all my accounts and
now you've ruined it! Luckily I use your dog's name for my bank passwords
which is probably still safe.
To address the OP, I would agree with skipping trim on both the user name
and password. If it's a copy-paste error, they will try again. If you want
to get fancy, warn when the password starts with or ends with spaces if it
comes back incorrect, but I think that's probably going to be so rare as not
to be worth the extra effort.
David