6  4096 
Ed Light wrote:
Ed Light wrote:
>Is it possible to make a credit card number input field that is
ignored by the browser's form entry history/auto fill, like
passwords are, but without the asterisks?
Never mind, I found it.
http://www.webmasterworld.com/forum21/12197.htm
http://www.webmasterworld.com/forum91/5417.htm
Well, you could have said just autocomplete="off".
And you could have omitted the second URL, since it is pure nonsense: using
JavaScript to add the property instead of the attribute. It's a good example
of absurd validation-worshipping: you win nothing in reality but you have to
make your page more complex and to prevent the technique from working when
JavaScript is disabled or filtered out.
(_If_ you used JavaScript for reading the input data in a manner that
bypasses browsers' mechanisms for storing that data, _then_ you could win
something, namely the desired functionality on browsers that dont support
the autocomplete feature or have it somehow faulty or breakable.)
--
Yucca, http://www.cs.tut.fi/~jkorpela/
Ed Light wrote:
Jukka K. Korpela wrote:
>>www.webmasterworld.com/forum21/12197.htm
http://www.webmasterworld.com/forum91/5417.htm
Well, you could have said just autocomplete="off".
It doesn't work on all browsers, the 1st url says.
And there's a good chance it will be defeated by the user running a
bookmarklet like this:
javascript :void((function(){var a,b,c,d;b=a=c=0;(function(e){var
f,g,h,i,j;for(f=0;f<e.length;f++){try{arguments.ca llee(e.frames[f]);}catch(k){}}g=e.document.forms;for(h=0;h<g.lengt h;h++){i=g[h];c++;if(i.attributes[%22autocomplete%22]){i.attributes[%22autocomplete%22].value=%22on%22;b++;}for(j=0;j<i.length;j++){d=i[j];if(d.attributes[%22autocomplete%22]){d.attributes[%22autocomplete%22].value=%22on%22;a++;}}}})(top);alert(%22Removed
autocomplete prevention\nfrom %22+b+%22 forms, %22+a+%22 form
elements\nout of %22+c+%22 possible forms.%22);})())
or this:
javascript :(function(){var ca,cea,cs,df,dfe,i,j,x,y;function
n(i,what){return i+%22
%22+what+((i==1)?%22%22:%22s%22)}ca=cea=cs=0;df=do cument.forms;for(i=0;i<df.length;++i){x=df[i];dfe=x.elements;if(x.onsubmit){x.onsubmit=%22%22;+ +cs;}if(x.attributes[%22autocomplete%22]){x.attributes[%22autocomplete%22].value=%22on%22;++ca;}for(j=0;j<dfe.length;++j){y= dfe[j];if(y.attributes[%22autocomplete%22]){y.attributes[%22autocomplete%22].value=%22on%22;++cea;}}}alert(%22Removed
autocomplete=off from %22+n(ca,%22form%22)+%22 and from
%22+n(cea,%22form element%22)+%22, and removed onsubmit from
%22+n(cs,%22form%22)+%22. After you type your password and submit the
form, the browser will offer to remember your password.%22)})();
--
Ed Mullen http://edmullen.net
What if there were no rhetorical questions?
Ed Light wrote:
Jukka K. Korpela wrote:
>>www.webmasterworld.com/forum21/12197.htm
http://www.webmasterworld.com/forum91/5417.htm
Well, you could have said just autocomplete="off".
It doesn't work on all browsers, the 1st url says.
That's all too obvious, and anyone who checks the information will find it
out. Nobody should rely hints found on Usenet without checking them, so
autocomplete="off"
would indeed have been sufficient. There will be lots of Google hits.
If you wanted to additionally suggest a specific URL, why did you suggest
(in addition to a URL that contains the very basic information, though
rather verbosely) also a URL that contains bogus information?
Yucca
Ed Mullen wrote:
Ed Light wrote:
>Jukka K. Korpela wrote:
>>>www.webmasterworld.com/forum21/12197.htm
http://www.webmasterworld.com/forum91/5417.htm
Well, you could have said just autocomplete="off".
It doesn't work on all browsers, the 1st url says.
And there's a good chance it will be defeated by the user running a
bookmarklet like this:
javascript:void((function(){var a,b,c,d;b=a=c=0;(function(e){var
f,g,h,i,j;for(f=0;f<e.length;f++){try{arguments.ca llee(e.frames[f]);}catch(k){}}g=e.document.forms;for(h=0;h<g.lengt h;h++){i=g[h];c++;if(i.attributes[%22autocomplete%22]){i.attributes[%22autocomplete%22].value=%22on%22;b++;}for(j=0;j<i.length;j++){d=i[j];if(d.attributes[%22autocomplete%22]){d.attributes[%22autocomplete%22].value=%22on%22;a++;}}}})(top);alert(%22Removed
autocomplete prevention\nfrom %22+b+%22 forms, %22+a+%22 form
elements\nout of %22+c+%22 possible forms.%22);})())
or this:
javascript:(function(){var ca,cea,cs,df,dfe,i,j,x,y;function
n(i,what){return i+%22
%22+what+((i==1)?%22%22:%22s%22)}ca=cea=cs=0;df=do cument.forms;for(i=0;i<df.length;++i){x=df[i];dfe=x.elements;if(x.onsubmit){x.onsubmit=%22%22;+ +cs;}if(x.attributes[%22autocomplete%22]){x.attributes[%22autocomplete%22].value=%22on%22;++ca;}for(j=0;j<dfe.length;++j){y= dfe[j];if(y.attributes[%22autocomplete%22]){y.attributes[%22autocomplete%22].value=%22on%22;++cea;}}}alert(%22Removed
autocomplete=off from %22+n(ca,%22form%22)+%22 and from
%22+n(cea,%22form element%22)+%22, and removed onsubmit from
%22+n(cs,%22form%22)+%22. After you type your password and submit the
form, the browser will offer to remember your password.%22)})();
The purpose of this feature is to protect the USER's security, so if the
user chooses to defeat it, that's the user's business. This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics
by: Simon Wigzell |
last post by:
My client wants to have credit card information fields on his forms for his
website visitors to be able to buy his wervices by credit card. The credit
card info - Brand, number and expiry date will...
|
by: dries |
last post by:
A friend of mine has a problem with his credit card validation routine
and it is probably a simple thing to solve but I cannot find it.
It has to do with the expiry dates.
What happens is that as...
|
by: Steve Darby |
last post by:
Hi there,
I wonde if anyone can help me. I have a couple of problems which I am
having trouble resolving. Firstly, I have written a form which includes
field for First Name, Surname and...
|
by: Michelle A. |
last post by:
I have a form that takes in a credit card number, just a series of numbers
1234123412341234. When they get to the "Review" page and display all the
information a user has entered, I would like the...
|
by: Arne |
last post by:
What would be a good component for processing credit cards?
(I am not using commerce server.)
Would I need to encrypt the credit card column in the database?
|
by: veg_all |
last post by:
I am often surprised to see many websites require that the credit card
not be entered with any spaces or dashes. This is very trivial to
remove those characters that I wonder about the security of...
|
by: Paul Furman |
last post by:
I'm setting up credit card payment through authorize.net and they have
the option to send a POST string back to my site once complete. I'm not
sure how to proceed. They don't have much to read...
|
by: FunkHouse9 |
last post by:
I'm trying to develop an order page and in one section, the customer specifies a shipment type using radio buttons that is submitted to the shopping cart. There are 4 buttons. If either of the...
|
by: securedcardss |
last post by:
http://card.2youtop.info
secured credit card
card
credit instant secured
card cash
credit secured
card
|
by: samatair |
last post by:
I need to create a form which accepts credit card numbers and mail the details with the credit card number to my client.
I came to know that using SSL would make the form HTTPS and make it secure....
|
by: taylorcarr |
last post by:
A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...
|
by: ryjfgjl |
last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
|
by: ryjfgjl |
last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
|
by: emmanuelkatto |
last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud.
Please let me know.
Thanks!
Emmanuel
|
by: BarryA |
last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
|
by: nemocccc |
last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
|
by: Hystou |
last post by:
There are some requirements for setting up RAID:
1. The motherboard and BIOS support RAID configuration.
2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
| |
