| Author |
|
plittlefield
Newbie
Joined: 10 March 2016
Location: United Kingdom
Online Status: Offline
Posts: 2
|
| Posted: 10 March 2016 at 6:26am | IP Logged
|
|
|
Is there a way to disable the autocomplete offered to web browsers for the login form, to comply with PCI DSS security?
|
| Back to Top |
|
| |
Igor
AfterLogic Support
Joined: 24 June 2008
Location: United States
Online Status: Offline
Posts: 6104
|
| Posted: 11 March 2016 at 2:22am | IP Logged
|
|
|
That can be achieved by adding autocomplete="off" parameter to login form fields defined in templates/views/Login/LoginViewModel.html file, for example:
Code:
<input id="selenium_login_email" tabindex="1" class="input check_autocomplete_input" name="email" data-i18n="LOGIN/LABEL_EMAIL"
type="email" spellcheck="false" data-bind="value: email, hasfocus: emailFocus, valueUpdate: 'afterkeydown', initDom: emailDom, i18n: 'placeholder'" /> |
|
|
Be sure to clear data/cache/ content as well as browser cache to apply changes.
--
Regards,
Igor, AfterLogic Support
|
| Back to Top |
|
| |
plittlefield
Newbie
Joined: 10 March 2016
Location: United Kingdom
Online Status: Offline
Posts: 2
|
| Posted: 15 March 2016 at 3:52am | IP Logged
|
|
|
Thanks for that. I have edited that file, added autocomplete="off" to both the form and all the separate fields, cleared the server cache, browser cache, cookies and restarted. I have also disabled my Firefox plugins, and tried afterwards.
Alas, my browser still offers the login information when clicking in the Email or password fields.
Any ideas?
|
| Back to Top |
|
| |
Igor
AfterLogic Support
Joined: 24 June 2008
Location: United States
Online Status: Offline
Posts: 6104
|
| Posted: 15 March 2016 at 4:10am | IP Logged
|
|
|
As far as we can tell, from this article for example, setting autocomplete="off" only means that credentials are no longer being saved, but it doesn't mean disabling the autocompletion itself. Also, browsers tend to ignore "off" value, setting it to something like "nope" may help in some cases.
--
Regards,
Igor, AfterLogic Support
|
| Back to Top |
|
| |
MailBee.NET Objects 
MailBee.NET Queue 
MailBee Objects 
WebMail Pro PHP 
AfterLogic Aurora 
MailSuite Pro for Linux 
Unified Messaging Solution 
Search
Register
Login
Topic: Disable AutoComplete for PCI DSS Complian
Privacy policy |
Refund policy