form fields and no-cache

[shank]

Is it possible to stop 1 single form field from being cached?
I would like all the name and address fields to be cached by Internet
Explorer, but not the credit card field.
How is that done?
thanks

[Brian]

shank wrote:

Is it possible to stop 1 single form field from being cached?
Cached? Do you mean you don't want the browser to save certain form
data? If so, then you can't force what you want on the client end.
IE/Win might be conned into not saving it, but other browsers will not.
I would like all the name and address fields to be cached by Internet
Explorer, but not the credit card field.

It sounds like you need to take some security 101 courses, preferably
before accepting credit cards on the net. Do you have ssl? A certificate?

--
Brian (remove ".invalid" to email me)
http://www.tsmchughs.com/

[Philip Ronan]

On 22/7/04 11:10 pm, shank wrote:

Is it possible to stop 1 single form field from being cached?
I would like all the name and address fields to be cached by Internet
Explorer, but not the credit card field.
How is that done?
thanks

Try this:
<INPUT name="creditcard" type="text" autocomplete="off">

--
Philip Ronan
ph***********@virgin.net
(Please remove the "z"s if replying by email)

[shank]

That's it!
thanks!

"Philip Ronan" <ph***********@virgin.net> wrote in message
news:BD269203.1E81A%ph***********@virgin.net...

On 22/7/04 11:10 pm, shank wrote:

Is it possible to stop 1 single form field from being cached?
I would like all the name and address fields to be cached by Internet
Explorer, but not the credit card field.
How is that done?
thanks

Try this:
<INPUT name="creditcard" type="text" autocomplete="off">

--
Philip Ronan
ph***********@virgin.net
(Please remove the "z"s if replying by email)

[Harlan Messinger]

"shank" <sh***@tampabay.rr.com> wrote:

That's it!
thanks!

"That's it" in browsers where that works. What about browsers where
that doesn't work?

"Philip Ronan" <ph***********@virgin.net> wrote in message
news:BD269203.1E81A%ph***********@virgin.net...

On 22/7/04 11:10 pm, shank wrote:

> Is it possible to stop 1 single form field from being cached?
> I would like all the name and address fields to be cached by Internet
> Explorer, but not the credit card field.
> How is that done?
> thanks
>
>

Try this:
<INPUT name="creditcard" type="text" autocomplete="off">

--
Philip Ronan
ph***********@virgin.net
(Please remove the "z"s if replying by email)

--
Harlan Messinger
Remove the first dot from my e-mail address.
Veuillez ôter le premier point de mon adresse de courriel.

[Philip Ronan]

On 24/7/04 2:47 pm, Harlan Messinger wrote:

"That's it" in browsers where that works. What about browsers where
that doesn't work?

<INPUT .. autocomplete="off"> is an IE attribute that switches off an IE
feature. Other browsers will ignore it.

--
Philip Ronan
ph***********@virgin.net
(Please remove the "z"s if replying by email)

[Brian]

Philip Ronan wrote:

<INPUT .. autocomplete="off"> is an IE attribute that switches off
an IE feature. Other browsers will ignore it.

I should be so lucky. Mozilla also switches off form fill-in support
on such sites. There used to be a preference to override it, but it
seems to have diappeared in Firefox.

--
Brian (remove ".invalid" to email me)
http://www.tsmchughs.com/

[Philip Ronan]

On 24/7/04 6:25 pm, Brian wrote:

Philip Ronan wrote:

<INPUT .. autocomplete="off"> is an IE attribute that switches off
an IE feature. Other browsers will ignore it.

I should be so lucky. Mozilla also switches off form fill-in support
on such sites. There used to be a preference to override it, but it
seems to have diappeared in Firefox.

Well at least the page is behaving as the author intended :-)

In fact I think it's a good idea adding this attribute to an input field for
a credit card number. Surely nobody would be insane enough to want this
entered automatically. And you wouldn't want your phone number to appear in
there after you pressed the first digit, would you? So what's the problem?

--
Philip Ronan
ph***********@virgin.net
(Please remove the "z"s if replying by email)

[Brian]

Philip Ronan wrote:

Brian wrote:

Philip Ronan wrote:

<INPUT .. autocomplete="off"> is an IE attribute that switches
off an IE feature. Other browsers will ignore it.
I should be so lucky. Mozilla also switches off form fill-in
support on such sites. There used to be a preference to override
it, but it seems to have diappeared in Firefox.

Well at least the page is behaving as the author intended :-)

Heh, yeah.
In fact I think it's a good idea adding this attribute to an input
field for a credit card number. Surely nobody would be insane
enough to want this entered automatically.
Why not? I want it entered in automatically on my home computer, since
someone would have to break into my house and steal my computer to
get the number. And if they did that, they're just as likely to have
the card itself.
And you wouldn't want your phone number to appear in there after
you pressed the first digit, would you?

Well, yes I would. I want my default browser to ask me when I enter
form data if it should save it and reenter it automatically next time.
Mind you, the browser should not do this without asking, since that
would be a privacy violation, in particular in public situations
(kiosk browser, library, etc.). A well run internet cafe or library
would configure the browser to disable saving form data. But that
should be done on the client side.

--
Brian (remove ".invalid" to email me)
http://www.tsmchughs.com/

[Tim]

Philip Ronan wrote:

In fact I think it's a good idea adding this attribute to an input
field for a credit card number. Surely nobody would be insane
enough to want this entered automatically.

Brian <us*****@julietremblay.com.invalid> posted:
Why not? I want it entered in automatically on my home computer, since
someone would have to break into my house and steal my computer to
get the number. And if they did that, they're just as likely to have
the card itself.

What does IE do if someone hid that form gadget, yet IE has cached answers
for it? Does it autofill it with your credit card again, and you might you
unknowingly submit it to someone?

That's not something I'd care to experiment with, nor would I be very
surprised at IE doing something very stupid.

--
If you insist on e-mailing me, use the reply-to address (it's real but
temporary). But please reply to the group, like you're supposed to.

This message was sent without a virus, please delete some files yourself.

[Philip Ronan]

On 24/7/04 10:30 pm, Brian wrote:

Philip Ronan wrote:

And you wouldn't want your phone number to appear in there after
you pressed the first digit, would you?

Well, yes I would. I want my default browser to ask me when I enter
form data if it should save it and reenter it automatically next time.
Mind you, the browser should not do this without asking, since that
would be a privacy violation, in particular in public situations
(kiosk browser, library, etc.). A well run internet cafe or library
would configure the browser to disable saving form data. But that
should be done on the client side.

Maybe things work differently on your system. In the Mac versions of IE, the
autocomplete items are fetched from the user profile, so I don't think it
would cause problems in internet cafes.

But whenever I click in an empty INPUT box and press the "0" key, my phone
number appears. Or if I press the "2" key, my street address appears.

Of course if I carry on typing, the additional text goes away. But if I just
want to type in a "0" or a "2" by itself, then I have to *delete* the
autocomplete text. When the text box is just one character wide, I can't see
that the autocomplete text has been added, so sometimes it gets left there
by mistake. Obviously I'd be in big trouble if this happened with my credit
card number.

So I think autocomplete should definitely be disabled for sensitive
information like credit card numbers and passwords.

Phil

--
Philip Ronan
ph***********@virgin.net
(Please remove the "z"s if replying by email)

[Brian]

Tim wrote:

Philip Ronan wrote:

a credit card number. Surely nobody would be insane enough to
want this entered automatically.

Brian posted:

Why not? I want it entered in automatically on my home computer,
since someone would have to break into my house and steal my
computer to get the number.

What does IE do if someone hid that form gadget, yet IE has cached
answers for it? Does it autofill it with your credit card again,
and you might you unknowingly submit it to someone?

I'm not sure I follow. There is no autofill for hidden form fields,
since there's no way to fill it in in the first place.
That's not something I'd care to experiment with, nor would I be
very surprised at IE doing something very stupid.

Even if it were true, the answer to a stupid IE feature is not markup
to disable that stupid feature, is it?

--
Brian (remove ".invalid" to email me)
http://www.tsmchughs.com/