enrolment key should not be named as a password field

enrolment key should not be named as a password field

by Albert Ramsbottom -
Number of replies: 3

enrolment key should not be named as a password field, it should be named as enrolment key and the html field should be something else, maybe dynamically generated so it doesn't keep prefiling the field with ones personal password

autocomplete="off"

Maybe

smile


Albert

Average of ratings: -
In reply to Albert Ramsbottom

Re: enrolment key should not be named as a password field

by Albert Ramsbottom -

This is more serious than it looks as every-time I go to the edit settings on a course, it will overwrite the enrolment key with the most used password, which is my personal one.

Now if one doesnt have the show password checkbox checked and you cannot see this, every time anyone with admin access goes to this page and saves a change it will save their personal password as the enrolment key

This is not a password field and should have autocomplete=off

Cheers


Average of ratings: Useful (1)
In reply to Albert Ramsbottom

Re: enrolment key should not be named as a password field

by Sara Cenni -

You're absolutely right!!!