Re: TextMode property set to "Password"

well - then you have to live with that - or assume that no password==no password change


-----
Dominick Baier (http://www.leastprivilege.com)

well since the page is about updating user details I am displaying the
existing password on the page, if the user wants he can change the
password or else the existing is retained.

"Dominick Baier" wrote:

Hi,

well - TextMode is only for the visualization - you shouldn't set the
password for the user.

-----
Dominick Baier (http://www.leastprivilege.com)
I have set an <asp:textbox> TextMode property to Password but also
populate it with characters(so the user doesn't have to re-enter
their password). I populate the textbox in Page_Load, using
following:

txtPassword.Attributes.Add("value", GetPassword().ToString())

But the problem I am facing is this:
if a user does a view source on the form, the password is visible as
plain
text and that is never good from a security standpoint. What is the
way to
make sure that the password is not visible as plain text in view
source.


.

Relevant Pages

  • Re: TextMode property set to "Password"
    ... if they forget their password - the usual procedure is to send them a random new one via mail (maybe combined with a secret question/answer) ... Dominick Baier ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: TextMode property set to "Password"
    ... well - TextMode is only for the visualization - you shouldn't set the password for the user. ... Dominick Baier ... I populate the textbox in Page_Load, ... make sure that the password is not visible as plain text in view ...
    (microsoft.public.dotnet.framework.aspnet.security)