Then how do programmers handle initializing passwords for those who want
their password remembered? I know that when I want my password remembered
the password is intialized with asteriks in the box. It seems to me the
only way to do it is to put the password in a hidden field and then access
that field if nothing is entered in the password box by the user.
Dave
> Hi,
>
[quoted text clipped - 11 lines]
> IMO it should be like that, otherwise a savvy user could do a right click,
> see code and see your password just there.
Jon Skeet [C# MVP] - 03 Mar 2008 15:27 GMT
> Then how do programmers handle initializing passwords for those who want
> their password remembered?
That should usually be handled on the client, by the browser itself.
Most browsers are able to store passwords in a safe way - unlike
having it in the page.
Personally I try to avoid the server needing to have the plaintext
password available in the first place, aside from during password
changes. Usually, only a hash should be available.
Jon