Re: QF Controller page sessions holding on to passwords as plain text
| From: | Arnaud Limbourg | Date: | Wed, 01 Oct 2003 07:00:58 +0000 |
| Subject: | Re: QF Controller page sessions holding on to passwords as plain text | ||
| References: | 1 | Groups: | php.pear.general |
| Request: | Send a blank email to pear-general+get-8165@lists.php.net to get a copy of this message | ||
Well, a multi-page form has to save its state somehow. Since the data is on the server encrypting it would not bring that much added value and it would make things slower.
Arnaud.
Mike Carter wrote:
Hi, Was just thinking about how form field data is stored in a controller session array. Isn't it slightly bad to be storing plain text content of any quickform 'password' elements throughout the pages of the controller? Regards,