Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...4.8.2 - Why is form autocomplete=off?4.8.2 - Why is form autocomplete=off?
Previous
 
Next
New Post
6/12/2010 1:58 PM
 
Hello, where do we stand on this? I have a site running 5.4.1 where there is no way to enable username/password autocomplete (and on any browser, thus it must be a dnn thing); on the other hand it works fine on some other 4.9.x installations. I looked everywhere for weeks... so frustrating. Everyone talks about the login timeout which is another matter and well resolved, as opposed to this one. Can someone give a definitive status, please? Do we have to get back to our hosting providers because it is a asp.net internal setting perhaps? Thanks, Franco
 
New Post
6/12/2010 5:32 PM
 
according to previous posts from Cathal, who is security expert at dotnetnuke.corp, this had been disabled intentionally for username and password, and I have neither seen a code change nor an enhancement request in the issue tracker at support.dotnetnuke.com by any user. The easiest option to work around is using a high value for persistent cookie timeout (10,000 is about one week), which reliefs users from login at all if revisiting within this timeframe (and not hitting logout).

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
6/13/2010 6:52 AM
 
Hi Sebastian, in my opinion, login persistence and form autocompletion are two different things. Diligent users that logout find themselves penalized by autocompletion off. Most of sites around allow autocompletion and if it the concern is about public PCs then the choice should be given the user. If I do not understand the security concern my client will do and care even less... what they want is the easy of use in a world of increasing accounts. I will try and add a request at the group, but is there a way to 'patch' this for existing installations and how? Thanks, Franco
 
New Post
6/13/2010 7:21 AM
 

I was wondering why Opera 'Wand' stopped submitting the login form in to all off my DNN sites... I eventually found the "autocomplete=off" and came up to this tread ...

I just keep thinking and I don't see what could be the "security issue" I mean in the CMS... ofc this is a issue to the user but than its the user that needs to worries about it, it could be a nice thing in local intranets, but I think it sucks for public sites.. either way we should be able to EASLY change this in the portal settings or host settings...

I simply can't remember all the host passwords that's why I use Opera's Wand and input a different master password that I always remember, and change regularly!

 
New Post
6/13/2010 8:19 AM
 
You can change this in DesktopModules/Authentication/Login.ascx.vb

Comment out these lines:
'search selected authentication control for username and password fields
            'and inject autocomplete=off so browsers do not remember sensitive details
           ' Dim username As WebControl = loginControl.FindControl("txtUsername")
            'If Not username Is Nothing Then
            '    username.Attributes.Add("AUTOCOMPLETE", "off")
            'End If
            'Dim password As WebControl = loginControl.FindControl("txtPassword")
            'If Not password Is Nothing Then
            '    password.Attributes.Add("AUTOCOMPLETE", "off")
            'End If


DotNetNuke Modules from Snapsis.com
 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...4.8.2 - Why is form autocomplete=off?4.8.2 - Why is form autocomplete=off?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out