Discussions of secure PHP coding. Security in software is important, so don't be afraid to ask. And when answering: be anal. Nitpick. No security vulnerability is too small.
~pickle | Please use [ code=html ], [ code=php ], etc tags where appropriate when posting code. Your post has been edited to reflect how we'd like it posted. Please read: Posting Code in the Forums to learn how to do it too.
I've created a login form for my website. When a user logs in, it works fine, but for some reason Firefox is not prompting to "Remember password". Does anyone know why? I've scrapped all my code and boiled it down to a bare bones example and still I can't seem to figure out why Firefox won't prompt me. Here's what I've got:
And the URL to access to this page is as static as can be: http://www.example.com/login.html. Also, I've cleared my all my private data multiple times to ensure I was working with a clean slate in Firefox's password management system. Still, it will not prompt me to remember the password. What am I missing?
Thanks in advance.
~pickle | Please use [ code=html ], [ code=php ], etc tags where appropriate when posting code. Your post has been edited to reflect how we'd like it posted. Please read: Posting Code in the Forums to learn how to do it too.
I just think I figured out a little more. Turns out that I lied by accident - my URL was not as simple as can be. It is a subdomain of my live site where I'm doing some developing. Something like http://developing.example.com/login.html.
I've just discovered that Firefox will prompt to "Remember me" if the URL has no subdomain. If I upload login.html to my main site, it works. I don't know what that's about, but there it is.
blue-printf wrote:i tried your your code and it does ask me to if i want ff to remember it.
maybe you have the never remember for this site set to on.
go to options->security->passwords->exeptions. and remove the site form that list.
(tab names may differ. my ff is not in english)
Crap. You were right. Man, I suck. I spent the last hour trying to figure this out and it turned out that I must've clicked "Don't Remember Me". Bah! Horrible... horrible... horrible.