2pisoftware / cmfive

DEPRECATED! Please see https://github.com/2pisoftware/cmfive-core for new version
http://cmfive.com
4 stars 4 forks source link

protect user admin update username against population #185

Closed syntithenai closed 8 years ago

syntithenai commented 8 years ago

I am normally logged into cmfive using auth details admin/admin

When I create a new user, login as them and edit their profile, the form is autopopulated with the admin user details from the browser form autofill.

So if I'm not watching, I end up updating the username to admin (which shouldn't be possible either)

adam-buckley commented 8 years ago

This is a Chrome issue only apparently. I've had this issue in the past and the fix is not elegant at all...

Edit: maybe this is a nicer solution

adam-buckley commented 8 years ago

I think the latest version of Chrome finally fixes this issue, i.e. no longer prefilling: screen shot 2016-02-29 at 4 43 55 pm