|
Posted by Kim Andrι Akerψ on 11/11/05 17:52
Greg Scharlemann wrote:
> I've got a simple registration script that has an input field of type
> password. When I retrieve what is typed in the password field via:
>
> $_REQUEST["password"];
>
> I always get the same encoded string: 8f404d5399b6eb816fe579381a0e2e6c
>
> First, does PHP automatically encrypt the password type fields and if
> so what method does it use and can I disable it?
>
> and second, is that the correct way to get the password from a simple
> form or is there a better way of doing it?
The password field isn't encrypted by the client before being sent to
the server, it's just a method of hiding what is typed to other people
who may also be watching the same screen as the person who's typing it
in.
What happens if you output the following variables?
$_GET["password"]
$_POST["password"]
$_COOKIE["password"]
--
Kim AndrΓ© AkerΓΈ
- kimandre@NOSPAMbetadome.com
(remove NOSPAM to contact me directly)
Navigation:
[Reply to this message]
|