Re: Re: Do you trim() usernames and passwords?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Dec 29, 2010 at 02:46, David Harkness <david.h@xxxxxxxxxxxxxxxxx> wrote:
> To address the OP, I would agree with skipping trim on both the user name
> and password. If it's a copy-paste error, they will try again.
>

They do try again: copying and pasting in the exact same manner. It
keeps happening.


> If you want
> to get fancy, warn when the password starts with or ends with spaces if it
> comes back incorrect, but I think that's probably going to be so rare as not
> to be worth the extra effort.
>

I've changed it to warn client-side (javascript) if there are leading
or trailing spaces in the the username only:
"Your username [begins||ends] with an errant space. Please reenter
your credentials more carefully."
I hope that they figure out to check their passwords as well.

-- 
Dotan Cohen

http://gibberish.co.il
http://what-is-what.com

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux