form fields and no-cache

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • shank

    form fields and no-cache

    Is it possible to stop 1 single form field from being cached?
    I would like all the name and address fields to be cached by Internet
    Explorer, but not the credit card field.
    How is that done?
    thanks


  • Brian

    #2
    Re: form fields and no-cache

    shank wrote:[color=blue]
    > Is it possible to stop 1 single form field from being cached?[/color]

    Cached? Do you mean you don't want the browser to save certain form
    data? If so, then you can't force what you want on the client end.
    IE/Win might be conned into not saving it, but other browsers will not.
    [color=blue]
    > I would like all the name and address fields to be cached by Internet
    > Explorer, but not the credit card field.[/color]

    It sounds like you need to take some security 101 courses, preferably
    before accepting credit cards on the net. Do you have ssl? A certificate?

    --
    Brian (remove ".invalid" to email me)

    Comment

    • Philip Ronan

      #3
      Re: form fields and no-cache

      On 22/7/04 11:10 pm, shank wrote:
      [color=blue]
      > Is it possible to stop 1 single form field from being cached?
      > I would like all the name and address fields to be cached by Internet
      > Explorer, but not the credit card field.
      > How is that done?
      > thanks
      >
      >[/color]

      Try this:
      <INPUT name="creditcar d" type="text" autocomplete="o ff">

      --
      Philip Ronan
      phil.ronanzzz@v irgin.net
      (Please remove the "z"s if replying by email)


      Comment

      • shank

        #4
        Re: form fields and no-cache

        That's it!
        thanks!

        "Philip Ronan" <phil.ronanzzz@ virgin.net> wrote in message
        news:BD269203.1 E81A%phil.ronan zzz@virgin.net. ..[color=blue]
        > On 22/7/04 11:10 pm, shank wrote:
        >[color=green]
        > > Is it possible to stop 1 single form field from being cached?
        > > I would like all the name and address fields to be cached by Internet
        > > Explorer, but not the credit card field.
        > > How is that done?
        > > thanks
        > >
        > >[/color]
        >
        > Try this:
        > <INPUT name="creditcar d" type="text" autocomplete="o ff">
        >
        > --
        > Philip Ronan
        > phil.ronanzzz@v irgin.net
        > (Please remove the "z"s if replying by email)
        >
        >
        >[/color]


        Comment

        • Harlan Messinger

          #5
          Re: form fields and no-cache

          "shank" <shank@tampabay .rr.com> wrote:
          [color=blue]
          >That's it!
          >thanks!
          >[/color]

          "That's it" in browsers where that works. What about browsers where
          that doesn't work?

          [color=blue]
          >"Philip Ronan" <phil.ronanzzz@ virgin.net> wrote in message
          >news:BD269203. 1E81A%phil.rona nzzz@virgin.net ...[color=green]
          >> On 22/7/04 11:10 pm, shank wrote:
          >>[color=darkred]
          >> > Is it possible to stop 1 single form field from being cached?
          >> > I would like all the name and address fields to be cached by Internet
          >> > Explorer, but not the credit card field.
          >> > How is that done?
          >> > thanks
          >> >
          >> >[/color]
          >>
          >> Try this:
          >> <INPUT name="creditcar d" type="text" autocomplete="o ff">
          >>
          >> --
          >> Philip Ronan
          >> phil.ronanzzz@v irgin.net
          >> (Please remove the "z"s if replying by email)
          >>
          >>
          >>[/color]
          >[/color]


          --
          Harlan Messinger
          Remove the first dot from my e-mail address.
          Veuillez ôter le premier point de mon adresse de courriel.

          Comment

          • Philip Ronan

            #6
            Re: form fields and no-cache

            On 24/7/04 2:47 pm, Harlan Messinger wrote:
            [color=blue]
            > "That's it" in browsers where that works. What about browsers where
            > that doesn't work?[/color]

            <INPUT .. autocomplete="o ff"> is an IE attribute that switches off an IE
            feature. Other browsers will ignore it.

            --
            Philip Ronan
            phil.ronanzzz@v irgin.net
            (Please remove the "z"s if replying by email)


            Comment

            • Brian

              #7
              Re: form fields and no-cache

              Philip Ronan wrote:
              [color=blue]
              > <INPUT .. autocomplete="o ff"> is an IE attribute that switches off
              > an IE feature. Other browsers will ignore it.[/color]

              I should be so lucky. Mozilla also switches off form fill-in support
              on such sites. There used to be a preference to override it, but it
              seems to have diappeared in Firefox.

              --
              Brian (remove ".invalid" to email me)

              Comment

              • Philip Ronan

                #8
                Re: form fields and no-cache

                On 24/7/04 6:25 pm, Brian wrote:
                [color=blue]
                > Philip Ronan wrote:
                >[color=green]
                >> <INPUT .. autocomplete="o ff"> is an IE attribute that switches off
                >> an IE feature. Other browsers will ignore it.[/color]
                >
                > I should be so lucky. Mozilla also switches off form fill-in support
                > on such sites. There used to be a preference to override it, but it
                > seems to have diappeared in Firefox.[/color]

                Well at least the page is behaving as the author intended :-)

                In fact I think it's a good idea adding this attribute to an input field for
                a credit card number. Surely nobody would be insane enough to want this
                entered automatically. And you wouldn't want your phone number to appear in
                there after you pressed the first digit, would you? So what's the problem?

                --
                Philip Ronan
                phil.ronanzzz@v irgin.net
                (Please remove the "z"s if replying by email)


                Comment

                • Brian

                  #9
                  Re: form fields and no-cache

                  Philip Ronan wrote:[color=blue]
                  > Brian wrote:
                  >[color=green]
                  >> Philip Ronan wrote:
                  >>[color=darkred]
                  >>> <INPUT .. autocomplete="o ff"> is an IE attribute that switches
                  >>> off an IE feature. Other browsers will ignore it.[/color]
                  >>
                  >> I should be so lucky. Mozilla also switches off form fill-in
                  >> support on such sites. There used to be a preference to override
                  >> it, but it seems to have diappeared in Firefox.[/color]
                  >
                  > Well at least the page is behaving as the author intended :-)[/color]

                  Heh, yeah.
                  [color=blue]
                  > In fact I think it's a good idea adding this attribute to an input
                  > field for a credit card number. Surely nobody would be insane
                  > enough to want this entered automatically.[/color]

                  Why not? I want it entered in automatically on my home computer, since
                  someone would have to break into my house and steal my computer to
                  get the number. And if they did that, they're just as likely to have
                  the card itself.
                  [color=blue]
                  > And you wouldn't want your phone number to appear in there after
                  > you pressed the first digit, would you?[/color]

                  Well, yes I would. I want my default browser to ask me when I enter
                  form data if it should save it and reenter it automatically next time.
                  Mind you, the browser should not do this without asking, since that
                  would be a privacy violation, in particular in public situations
                  (kiosk browser, library, etc.). A well run internet cafe or library
                  would configure the browser to disable saving form data. But that
                  should be done on the client side.

                  --
                  Brian (remove ".invalid" to email me)

                  Comment

                  • Tim

                    #10
                    Re: form fields and no-cache

                    Philip Ronan wrote:
                    [color=blue][color=green]
                    >> In fact I think it's a good idea adding this attribute to an input
                    >> field for a credit card number. Surely nobody would be insane
                    >> enough to want this entered automatically.[/color][/color]

                    Brian <usenet3@juliet remblay.com.inv alid> posted:
                    [color=blue]
                    > Why not? I want it entered in automatically on my home computer, since
                    > someone would have to break into my house and steal my computer to
                    > get the number. And if they did that, they're just as likely to have
                    > the card itself.[/color]

                    What does IE do if someone hid that form gadget, yet IE has cached answers
                    for it? Does it autofill it with your credit card again, and you might you
                    unknowingly submit it to someone?

                    That's not something I'd care to experiment with, nor would I be very
                    surprised at IE doing something very stupid.

                    --
                    If you insist on e-mailing me, use the reply-to address (it's real but
                    temporary). But please reply to the group, like you're supposed to.

                    This message was sent without a virus, please delete some files yourself.

                    Comment

                    • Philip Ronan

                      #11
                      Re: form fields and no-cache

                      On 24/7/04 10:30 pm, Brian wrote:
                      [color=blue]
                      > Philip Ronan wrote:[color=green]
                      >> And you wouldn't want your phone number to appear in there after
                      >> you pressed the first digit, would you?[/color]
                      >
                      > Well, yes I would. I want my default browser to ask me when I enter
                      > form data if it should save it and reenter it automatically next time.
                      > Mind you, the browser should not do this without asking, since that
                      > would be a privacy violation, in particular in public situations
                      > (kiosk browser, library, etc.). A well run internet cafe or library
                      > would configure the browser to disable saving form data. But that
                      > should be done on the client side.[/color]

                      Maybe things work differently on your system. In the Mac versions of IE, the
                      autocomplete items are fetched from the user profile, so I don't think it
                      would cause problems in internet cafes.

                      But whenever I click in an empty INPUT box and press the "0" key, my phone
                      number appears. Or if I press the "2" key, my street address appears.

                      Of course if I carry on typing, the additional text goes away. But if I just
                      want to type in a "0" or a "2" by itself, then I have to *delete* the
                      autocomplete text. When the text box is just one character wide, I can't see
                      that the autocomplete text has been added, so sometimes it gets left there
                      by mistake. Obviously I'd be in big trouble if this happened with my credit
                      card number.

                      So I think autocomplete should definitely be disabled for sensitive
                      information like credit card numbers and passwords.

                      Phil

                      --
                      Philip Ronan
                      phil.ronanzzz@v irgin.net
                      (Please remove the "z"s if replying by email)


                      Comment

                      • Brian

                        #12
                        Re: form fields and no-cache

                        Tim wrote:[color=blue]
                        > Philip Ronan wrote:
                        >[color=green][color=darkred]
                        >>> a credit card number. Surely nobody would be insane enough to
                        >>> want this entered automatically.[/color][/color]
                        >
                        > Brian posted:
                        >[color=green]
                        >> Why not? I want it entered in automatically on my home computer,
                        >> since someone would have to break into my house and steal my
                        >> computer to get the number.[/color]
                        >
                        > What does IE do if someone hid that form gadget, yet IE has cached
                        > answers for it? Does it autofill it with your credit card again,
                        > and you might you unknowingly submit it to someone?[/color]

                        I'm not sure I follow. There is no autofill for hidden form fields,
                        since there's no way to fill it in in the first place.
                        [color=blue]
                        > That's not something I'd care to experiment with, nor would I be
                        > very surprised at IE doing something very stupid.[/color]

                        Even if it were true, the answer to a stupid IE feature is not markup
                        to disable that stupid feature, is it?

                        --
                        Brian (remove ".invalid" to email me)

                        Comment

                        Working...