Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / General / May 2008

Tip: Looking for answers? Try searching our database.

Loading a password field when editing a user.

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Mufasa - 16 May 2008 21:15 GMT
I have a form where you can edit user information. There's a text box of
type password that I prefill with the value from the DB. But it doesn't show
anything and is acting as if it's not filled in (I have a required field
validator on the field and it is coming up as blank.)

I know the value is there because I look at it through VS and the value is
being set. But it looks like it get cleared out before displaying to the
user.

Any thoughts?

TIA - Jeff.
Mark Rae [MVP] - 16 May 2008 23:35 GMT
> Any thoughts?

Yes. Specifically, UNDER NO CIRCUMSTANCES even try to do this!!!!!

If you populate a password field, it might show up to you as asterisks, but
do a View Source and you'll see it there in plain text.

As security risks go, it doesn't get much worse than this...

Signature

Mark Rae
ASP.NET MVP
http://www.markrae.net


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.