Jump to content



Latest News: (loading..)

- - - - -

The My Account page keeps prepopulating


  • Please log in to reply
12 replies to this topic

#1   lplplpx3

lplplpx3
  • Members
  • 33 posts
  • Real Name:Lola Phelps

Posted 13 June 2012 - 02:00 AM

Signed up as a new customer. Now everytime I go to the My Account page the Email Address and Password fields are already populated from the previous registration. Consequently going back into the New Customer detail page the Password field is already filled in and the email address lists under the Fax Number field. Not very secure at all and I am using shared SSL. Is there any way to stop both these pages from pre-populating the fields/data from the previous registration?

See attachments.
Attached File  New-Acc.png   42.72K   14 downloads                   Attached File  Returning.png   16.88K   13 downloads

Thanks.

#2   BryceJr

BryceJr
  • Members
  • 1,464 posts
  • Real Name:Bryce

Posted 13 June 2012 - 02:51 AM

I think that is more of a browser function rather than osCommerce.

Browser:

IE - tools - internet options - content >> autocomplete

Firefox - tools - options  >> security tab

Also, clear/delete your cookies.

#3   lplplpx3

lplplpx3
  • Members
  • 33 posts
  • Real Name:Lola Phelps

Posted 13 June 2012 - 03:37 AM

What if a user who signs up doesnt clear cookies? Then that means the person after will have their info. Also this might be a browser issue but this never happens on any of the other sites I log into. It might store the username but never the password as well (unless I've told the passord manager to do so). I was wondering if there wasnt a script or something that could ensure (at least the password field) would be blank. And why would the info also show on a completely different page...the New Customer detail page and put the email into the Fax field? Once again behaviour I have never seen on any other site.

If this is a browser issue (which ONLY happens with OSCommerce) is there an OSCommerce code fix for it?

Thanks.

#4   lplplpx3

lplplpx3
  • Members
  • 33 posts
  • Real Name:Lola Phelps

Posted 14 June 2012 - 01:45 AM

Nobody has a way to clear these fields on page load?

#5 ONLINE   joli1811

joli1811
  • Community Sponsor
  • 767 posts
  • Real Name:john dunlop
  • Gender:Male
  • Location:Ireland

Posted 14 June 2012 - 02:15 AM

Hi,
I have been wondering about this myself cleared cookies etc but the name was still appearing??

I had to delete the first new customer in Admin really not sure if its a bug or just my system I did install a log in box on the front page but still have not got an answer

John

#6   lplplpx3

lplplpx3
  • Members
  • 33 posts
  • Real Name:Lola Phelps

Posted 14 June 2012 - 02:31 AM

Hi John,
It's good to know I am not the only one experiencing this. In my other life as a QA tester I ran across this problem in a software application I was testing where a field was retaining credit card information and the developers managed to create a fix for it so I know it can be done. I may try some other routes for help also but I know this is one of the best OSCommerce forums, somebody will come up with something (I hope)!!!

Edited by lplplpx3, 14 June 2012 - 02:32 AM.


#7 ONLINE   joli1811

joli1811
  • Community Sponsor
  • 767 posts
  • Real Name:john dunlop
  • Gender:Male
  • Location:Ireland

Posted 14 June 2012 - 02:43 AM

Hi Lola

I reckon MR Phil and Jan Zonjee will love this one remember quick fix delete the first customer in admn,

John :-

Edited by joli1811, 14 June 2012 - 02:44 AM.


#8   lplplpx3

lplplpx3
  • Members
  • 33 posts
  • Real Name:Lola Phelps

Posted 14 June 2012 - 10:23 PM

Thanks John.

Edited by lplplpx3, 14 June 2012 - 10:23 PM.


#9 ONLINE   burt

burt

    Code Monkey

  • Community Team
  • 7,744 posts
  • Real Name:G Burton
  • Gender:Male
  • Location:UK/DEV/on

Posted 14 June 2012 - 10:33 PM

It is a local browser issue, therefore the next person (presumably using a different browser) will not see the pre-populated data.
eBooks / Templates

Warning: My posts may contain Horsemeat.

#10 ONLINE   joli1811

joli1811
  • Community Sponsor
  • 767 posts
  • Real Name:john dunlop
  • Gender:Male
  • Location:Ireland

Posted 15 June 2012 - 07:17 AM

Hi Burt

No it was not a local browser issue I wish it was I had to delete the first customer in admin to solve??

Thought it was  to do with add on log on box front page  but getting this problem in Thailand  web site and  UK website different computer/ different windows/ different browser

John

#11 ONLINE   burt

burt

    Code Monkey

  • Community Team
  • 7,744 posts
  • Real Name:G Burton
  • Gender:Male
  • Location:UK/DEV/on

Posted 15 June 2012 - 08:34 AM

In that case, somewhere in your code is a unwanted security hole.
eBooks / Templates

Warning: My posts may contain Horsemeat.

#12   bktrain

bktrain
  • Members
  • 2,104 posts
  • Real Name:Brian
  • Gender:Male
  • Location:On the brink of insanity

Posted 15 June 2012 - 10:44 PM

View Postjoli1811, on 14 June 2012 - 02:15 AM, said:

I did install a log in box on the front page but still have not got an answer

View Postjoli1811, on 15 June 2012 - 07:17 AM, said:

Thought it was  to do with add on log on box front page  but getting this problem in Thailand  web site and  UK website different computer/ different windows/ different browser
Is this the login box for 2.3.1?

Does this problem happen without the login box?

Are the email and password fields filled in in the login box?

I have not been able to see this happen.

Brian
Remember to backup database, files and pictures.

I have a problem for your solution
I reject your reality and substitute my own
My mind not only wanders, it sometimes leaves completely
The problem with the gene pool is that there is no lifeguard
Everyone’s entitled to my opinion


Links
Security
SSL Help
Basics for design
Basics for design V2.3+
How Do I ...?

#13 ONLINE   joli1811

joli1811
  • Community Sponsor
  • 767 posts
  • Real Name:john dunlop
  • Gender:Male
  • Location:Ireland

Posted 18 June 2012 - 10:20 AM

Hi,
sorry for the late reply but i think I localsied it. Will have to test again yes log in box for 2.31 that gives the option to display customer name etc the problem I found was that even after I had removed module he still displayed customer name I had to reininstall and then say no to the option of displaying customer name do not know if this was a security issue just baffled me a bit as the browser had no cookies and the module was removed this only happens in firefox not IE.
Just did not know where the name was coming from.
John

Edited by joli1811, 18 June 2012 - 10:21 AM.