Avatar of oxygen_728
oxygen_728 asked on

PHP and PHPBB3 - How do I disable a browser's ability to save passwords?

I'm running some PHPBB3 forums.

Any idea how I can keep my users from saving their passwords in their browsers?

Thanks,
PHPWeb ApplicationsApache Web Server

Avatar of undefined
Last Comment
oxygen_728

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Guy Hengel [angelIII / a3]

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Steve Bink

@angelIII
That's pretty slick.  I did not know browsers use the name attribute to identify a match with a stored password.  I'll have to play with that.

@oxygen_728:
The other answer: you can't.  

As with the 'back' button functionality, storing passwords in the browser is client functionality.  Without proper permissions (i.e., an add-on, ActiveX control, etc.), you cannot affect how the end user's client will behave.  If the user wants to allow passwords to be stored, there is nothing you can do to keep it from being stored.  In fact, even with angelIII's suggestion, they will STILL have the option to store the password...it just will not be recalled properly when the page is brought up again.  Thus the name attribute may prevent the stored password from being used, but does not eliminate the security hole created when storing it.
ASKER
oxygen_728

I agree that's a pretty slick solution, and I will try to implement it and let you know how it goes.

ASKER
oxygen_728

I implemented this solution, although it is only a partial solution.

Firefox 3 beta is actually able to remember the password anyways, at times -- After a while it forgets though.  

It may have something to do with cache or something

This works most of the time though!
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy