Friday, March 16, 2012

Password appearing as blank

All

When I retieve the users password into a textbox
(password textmode) from the database nothing appears, am
I doing something mad?

ThanksThis is done for security reasons. If you set the value of a textbox in
password mode, it will not show anything.

The reason is, it would have to appear in the plain text in the HTML - and
this would be a security risk, as anyone could just look at it, or intercept
it.

"yop" <yop@.oceanfree.net> wrote in message
news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
> All
> When I retieve the users password into a textbox
> (password textmode) from the database nothing appears, am
> I doing something mad?
> Thanks
This is done for security reasons. If you set the value of a textbox in
password mode, it will not show anything.

The reason is, it would have to appear in the plain text in the HTML - and
this would be a security risk, as anyone could just look at it, or intercept
it.

"yop" <yop@.oceanfree.net> wrote in message
news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
> All
> When I retieve the users password into a textbox
> (password textmode) from the database nothing appears, am
> I doing something mad?
> Thanks
How important that the actual password be in there? You could emit client
side script to set the value there - except set it to a * for every actual
letter. That will basically show the length. If the user tries to edit it -
then blank the whole thing out.

"Yop" <yop@.oceanfree.net> wrote in message
news:056c01c36bd5$708a1710$a001280a@.phx.gbl...
> Marina
> Never thought of that, what work around would people
> suggest or do?
>
> >--Original Message--
> >This is done for security reasons. If you set the value
> of a textbox in
> >password mode, it will not show anything.
> >The reason is, it would have to appear in the plain text
> in the HTML - and
> >this would be a security risk, as anyone could just look
> at it, or intercept
> >it.
> >"yop" <yop@.oceanfree.net> wrote in message
> >news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
> >> All
> >>
> >> When I retieve the users password into a textbox
> >> (password textmode) from the database nothing appears,
> am
> >> I doing something mad?
> >>
> >> Thanks
> >.
That is true, nah not overly important, just for a user
admin screen for the administrator only

>--Original Message--
>How important that the actual password be in there? You
could emit client
>side script to set the value there - except set it to a
* for every actual
>letter. That will basically show the length. If the user
tries to edit it -
>then blank the whole thing out.
>"Yop" <yop@.oceanfree.net> wrote in message
>news:056c01c36bd5$708a1710$a001280a@.phx.gbl...
>> Marina
>>
>> Never thought of that, what work around would people
>> suggest or do?
>>
>>
>> >--Original Message--
>> >This is done for security reasons. If you set the
value
>> of a textbox in
>> >password mode, it will not show anything.
>>> >The reason is, it would have to appear in the plain
text
>> in the HTML - and
>> >this would be a security risk, as anyone could just
look
>> at it, or intercept
>> >it.
>>> >"yop" <yop@.oceanfree.net> wrote in message
>> >news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
>> >> All
>> >>
>> >> When I retieve the users password into a textbox
>> >> (password textmode) from the database nothing
appears,
>> am
>> >> I doing something mad?
>> >>
>> >> Thanks
>>>> >.
>>
>.
You really shouldn't be storing clear text passwords anyway.. you should
create a message digest based on what they typed in and save that..

Another plus, your admins would not be able to see a user password, only
reset it to something else (which is ideal)..

"yop" <yop@.oceanfree.net> wrote in message
news:010101c36be3$daab6640$a101280a@.phx.gbl...
> That is true, nah not overly important, just for a user
> admin screen for the administrator only
>
> >--Original Message--
> >How important that the actual password be in there? You
> could emit client
> >side script to set the value there - except set it to a
> * for every actual
> >letter. That will basically show the length. If the user
> tries to edit it -
> >then blank the whole thing out.
> >"Yop" <yop@.oceanfree.net> wrote in message
> >news:056c01c36bd5$708a1710$a001280a@.phx.gbl...
> >> Marina
> >>
> >> Never thought of that, what work around would people
> >> suggest or do?
> >>
> >>
> >> >--Original Message--
> >> >This is done for security reasons. If you set the
> value
> >> of a textbox in
> >> >password mode, it will not show anything.
> >> >> >The reason is, it would have to appear in the plain
> text
> >> in the HTML - and
> >> >this would be a security risk, as anyone could just
> look
> >> at it, or intercept
> >> >it.
> >> >> >"yop" <yop@.oceanfree.net> wrote in message
> >> >news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
> >> >> All
> >> >>
> >> >> When I retieve the users password into a textbox
> >> >> (password textmode) from the database nothing
> appears,
> >> am
> >> >> I doing something mad?
> >> >>
> >> >> Thanks
> >> >> >> >.
> >> >.
That is what I will do, should have coped that is what
they are doing in Windows!

Thanks all

>--Original Message--
>You really shouldn't be storing clear text passwords
anyway.. you should
>create a message digest based on what they typed in and
save that..
>Another plus, your admins would not be able to see a
user password, only
>reset it to something else (which is ideal)..
>"yop" <yop@.oceanfree.net> wrote in message
>news:010101c36be3$daab6640$a101280a@.phx.gbl...
>> That is true, nah not overly important, just for a user
>> admin screen for the administrator only
>>
>>
>> >--Original Message--
>> >How important that the actual password be in there?
You
>> could emit client
>> >side script to set the value there - except set it to
a
>> * for every actual
>> >letter. That will basically show the length. If the
user
>> tries to edit it -
>> >then blank the whole thing out.
>>> >"Yop" <yop@.oceanfree.net> wrote in message
>> >news:056c01c36bd5$708a1710$a001280a@.phx.gbl...
>> >> Marina
>> >>
>> >> Never thought of that, what work around would people
>> >> suggest or do?
>> >>
>> >>
>> >> >--Original Message--
>> >> >This is done for security reasons. If you set the
>> value
>> >> of a textbox in
>> >> >password mode, it will not show anything.
>> >>> >> >The reason is, it would have to appear in the plain
>> text
>> >> in the HTML - and
>> >> >this would be a security risk, as anyone could just
>> look
>> >> at it, or intercept
>> >> >it.
>> >>> >> >"yop" <yop@.oceanfree.net> wrote in message
>> >> >news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
>> >> >> All
>> >> >>
>> >> >> When I retieve the users password into a textbox
>> >> >> (password textmode) from the database nothing
>> appears,
>> >> am
>> >> >> I doing something mad?
>> >> >>
>> >> >> Thanks
>> >>> >>> >> >.
>> >>>>> >.
>>
>.

0 comments:

Post a Comment