Showing posts with label users. Show all posts
Showing posts with label users. Show all posts

Saturday, March 24, 2012

Passing variables between pages

Hi,

I'm trying to pass some variables that requires users to register. The first page, users key in the necessary information. After which, the 2nd page will load and display the infomation that the user had keyed-in previously, from this page the user can choose to confirm or cancel. On confirmation, the 3rd page will load and that should be when the information is inserted into the database. My problem is when it reaches the 3rd page, the values seem to be gone, as the page loads with an error stating something like my user_id is not present(being a primary key, it cant be null). In the 2nd page, when i was trying to show the info, i added some hidden inputs at the bottom, its something like


<input id="user_id" type="hidden" value="<%=user_id%>">

and so on, i was expecting these inputs to be passed over to the 3rd page, but it doesnt seem to be this way, anyone can help me on this?May be you can try to use session variable.

Friday, March 16, 2012

Password appearing as blank

All

When I retieve the users password into a textbox
(password textmode) from the database nothing appears, am
I doing something mad?

ThanksThis is done for security reasons. If you set the value of a textbox in
password mode, it will not show anything.

The reason is, it would have to appear in the plain text in the HTML - and
this would be a security risk, as anyone could just look at it, or intercept
it.

"yop" <yop@.oceanfree.net> wrote in message
news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
> All
> When I retieve the users password into a textbox
> (password textmode) from the database nothing appears, am
> I doing something mad?
> Thanks
This is done for security reasons. If you set the value of a textbox in
password mode, it will not show anything.

The reason is, it would have to appear in the plain text in the HTML - and
this would be a security risk, as anyone could just look at it, or intercept
it.

"yop" <yop@.oceanfree.net> wrote in message
news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
> All
> When I retieve the users password into a textbox
> (password textmode) from the database nothing appears, am
> I doing something mad?
> Thanks
How important that the actual password be in there? You could emit client
side script to set the value there - except set it to a * for every actual
letter. That will basically show the length. If the user tries to edit it -
then blank the whole thing out.

"Yop" <yop@.oceanfree.net> wrote in message
news:056c01c36bd5$708a1710$a001280a@.phx.gbl...
> Marina
> Never thought of that, what work around would people
> suggest or do?
>
> >--Original Message--
> >This is done for security reasons. If you set the value
> of a textbox in
> >password mode, it will not show anything.
> >The reason is, it would have to appear in the plain text
> in the HTML - and
> >this would be a security risk, as anyone could just look
> at it, or intercept
> >it.
> >"yop" <yop@.oceanfree.net> wrote in message
> >news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
> >> All
> >>
> >> When I retieve the users password into a textbox
> >> (password textmode) from the database nothing appears,
> am
> >> I doing something mad?
> >>
> >> Thanks
> >.
That is true, nah not overly important, just for a user
admin screen for the administrator only

>--Original Message--
>How important that the actual password be in there? You
could emit client
>side script to set the value there - except set it to a
* for every actual
>letter. That will basically show the length. If the user
tries to edit it -
>then blank the whole thing out.
>"Yop" <yop@.oceanfree.net> wrote in message
>news:056c01c36bd5$708a1710$a001280a@.phx.gbl...
>> Marina
>>
>> Never thought of that, what work around would people
>> suggest or do?
>>
>>
>> >--Original Message--
>> >This is done for security reasons. If you set the
value
>> of a textbox in
>> >password mode, it will not show anything.
>>> >The reason is, it would have to appear in the plain
text
>> in the HTML - and
>> >this would be a security risk, as anyone could just
look
>> at it, or intercept
>> >it.
>>> >"yop" <yop@.oceanfree.net> wrote in message
>> >news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
>> >> All
>> >>
>> >> When I retieve the users password into a textbox
>> >> (password textmode) from the database nothing
appears,
>> am
>> >> I doing something mad?
>> >>
>> >> Thanks
>>>> >.
>>
>.
You really shouldn't be storing clear text passwords anyway.. you should
create a message digest based on what they typed in and save that..

Another plus, your admins would not be able to see a user password, only
reset it to something else (which is ideal)..

"yop" <yop@.oceanfree.net> wrote in message
news:010101c36be3$daab6640$a101280a@.phx.gbl...
> That is true, nah not overly important, just for a user
> admin screen for the administrator only
>
> >--Original Message--
> >How important that the actual password be in there? You
> could emit client
> >side script to set the value there - except set it to a
> * for every actual
> >letter. That will basically show the length. If the user
> tries to edit it -
> >then blank the whole thing out.
> >"Yop" <yop@.oceanfree.net> wrote in message
> >news:056c01c36bd5$708a1710$a001280a@.phx.gbl...
> >> Marina
> >>
> >> Never thought of that, what work around would people
> >> suggest or do?
> >>
> >>
> >> >--Original Message--
> >> >This is done for security reasons. If you set the
> value
> >> of a textbox in
> >> >password mode, it will not show anything.
> >> >> >The reason is, it would have to appear in the plain
> text
> >> in the HTML - and
> >> >this would be a security risk, as anyone could just
> look
> >> at it, or intercept
> >> >it.
> >> >> >"yop" <yop@.oceanfree.net> wrote in message
> >> >news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
> >> >> All
> >> >>
> >> >> When I retieve the users password into a textbox
> >> >> (password textmode) from the database nothing
> appears,
> >> am
> >> >> I doing something mad?
> >> >>
> >> >> Thanks
> >> >> >> >.
> >> >.
That is what I will do, should have coped that is what
they are doing in Windows!

Thanks all

>--Original Message--
>You really shouldn't be storing clear text passwords
anyway.. you should
>create a message digest based on what they typed in and
save that..
>Another plus, your admins would not be able to see a
user password, only
>reset it to something else (which is ideal)..
>"yop" <yop@.oceanfree.net> wrote in message
>news:010101c36be3$daab6640$a101280a@.phx.gbl...
>> That is true, nah not overly important, just for a user
>> admin screen for the administrator only
>>
>>
>> >--Original Message--
>> >How important that the actual password be in there?
You
>> could emit client
>> >side script to set the value there - except set it to
a
>> * for every actual
>> >letter. That will basically show the length. If the
user
>> tries to edit it -
>> >then blank the whole thing out.
>>> >"Yop" <yop@.oceanfree.net> wrote in message
>> >news:056c01c36bd5$708a1710$a001280a@.phx.gbl...
>> >> Marina
>> >>
>> >> Never thought of that, what work around would people
>> >> suggest or do?
>> >>
>> >>
>> >> >--Original Message--
>> >> >This is done for security reasons. If you set the
>> value
>> >> of a textbox in
>> >> >password mode, it will not show anything.
>> >>> >> >The reason is, it would have to appear in the plain
>> text
>> >> in the HTML - and
>> >> >this would be a security risk, as anyone could just
>> look
>> >> at it, or intercept
>> >> >it.
>> >>> >> >"yop" <yop@.oceanfree.net> wrote in message
>> >> >news:0bed01c36bc8$b34439d0$a401280a@.phx.gbl...
>> >> >> All
>> >> >>
>> >> >> When I retieve the users password into a textbox
>> >> >> (password textmode) from the database nothing
>> appears,
>> >> am
>> >> >> I doing something mad?
>> >> >>
>> >> >> Thanks
>> >>> >>> >> >.
>> >>>>> >.
>>
>.