jeffreyhi1 / loginsystem-rd

Automatically exported from code.google.com/p/loginsystem-rd
0 stars 0 forks source link

Fields getting cleared out upon Validation Failure on Registeration #38

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1.Enter invalid values in a field (e.g. invalid email) when using 
registration
2.Click Submit / Register button.

What is the expected output? What do you see instead?
The fields entered should maintain their values instead all fields are 
getting cleard out.

What version of the product are you using? On what operating system?
Used the demo here: 
https://www.webloginproject.com/login-project/aspdemo/register.asp

Please provide any additional information below.

Original issue reported on code.google.com by coty...@gmail.com on 29 Apr 2010 at 9:14

GoogleCodeExporter commented 8 years ago
I appreciate your time to enter this issue.  For cross site scripting 
protection if a
value entered is considered not valid for the field type (an invalid e-mail 
address
would be a fine example) the function which retrieves field values will return 
an
empty string rather than invalid (and potentially malicious) data.

The values posted by a form are never handled anywhere in code. Only the 
filtered
values are available. We could echo those values which are valid back to the 
form if
all the other required values were not entered. But if a value was invalid, it 
would
not be available in code to be echoed back to the form, nor should it.

Original comment by rdivilb...@gmail.com on 29 Apr 2010 at 10:19

GoogleCodeExporter commented 8 years ago
ASP changes made.
Need to parallel the changes in PHP

Original comment by rdivilb...@gmail.com on 30 Apr 2010 at 12:25

GoogleCodeExporter commented 8 years ago
Fixed ASP & PHP

Original comment by rdivilb...@gmail.com on 30 Apr 2010 at 3:02