|
Posted by Ben Bacarisse on July 26, 2007, 12:11 pm
Please log in for more thread options
> On Wed, 25 Jul 2007 17:08:32 -0700, ojasrege@yahoo.com wrote:
>
>>If I have a web form where a user enters sensitive information, such
>>as a SS#, is there any way for a web site to prohibit any browser from
>>remembering data for specific fields (IE's autocomplete)?
>>
>>Any tricks?
>
> You could add a random number to the end of the field's name
> attribute. E.G. <input type="textbox" name="ssecuritynumber284625" />
>
> Depending on the sort of CGI you use, you can strip the numbers out
> and retrieve the original form name.
>
> The browser would still remember it but it there would be a very slim
> chance of ever popping up again.
True, but one reason to worry about such things is that the
information is stored at all -- for example on a laptop this might be
stolen I don't really want any form data to saved in an accessible
format.
--
Ben.
|