QF Controller page sessions holding on to passwords as plain text
| From: | Mike Carter | Date: | Wed, 01 Oct 2003 01:12:16 +0000 |
| Subject: | QF Controller page sessions holding on to passwords as plain text | ||
| Groups: | php.pear.general | ||
| Request: | Send a blank email to pear-general+get-8161@lists.php.net to get a copy of this message | ||
Hi,
Was just thinking about how form field data is stored in a controller
session array.
Isn't it slightly bad to be storing plain text content of any quickform
'password' elements throughout the pages of the controller?
Regards,
--
Mike Carter
________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs Email
Security System. For more information on a proactive email security
service working around the clock, around the globe, visit
http://www.messagelabs.com
________________________________________________________________________