Make WordPress Core

Opened 12 years ago

Closed 12 years ago

#28585 closed enhancement (fixed)

Disable Autocomplete on DB setup-config.php

Reported by: hebbet Owned by: johnbillion
Priority: normal Milestone: 4.0
Component: Upgrade/Install Version: 3.9.1
Severity: normal Keywords: has-patch
Cc: Focuses:

Description

Currently that suggests other database Passwords, when setting up yet another wordpress blog.

In my opinion that textfield should either changed to a type="password" or autocomplete="off" should be added.

Will add patches for both asap.

Attachments (2)

setup-config.php.patch (726 bytes ) - added by hebbet 12 years ago.
patch for autocomplete off
setup-config-2.php.patch (711 bytes ) - added by hebbet 12 years ago.
patch for password input with type password

Download all attachments as: .zip

Change History (7)

@hebbet
12 years ago

patch for autocomplete off

@hebbet
12 years ago

patch for password input with type password

#1 @hebbet
12 years ago

  • Keywords has-patch added

#2 @SergeyBiryukov
12 years ago

  • Component AdministrationUpgrade/Install
  • Milestone Awaiting Review4.0

type="password" is a wontfix, see #3534, #5529, #22443, #25630.

autocomplete="off" makes sense to me.

#3 @SergeyBiryukov
12 years ago

Should we perhaps disable autocomplete for the whole form?

#4 @johnbillion
12 years ago

I think setup-config.php.patch is fine. Autocomplete is handy for the other fields on this form.

#5 @johnbillion
12 years ago

  • Owner set to johnbillion
  • Resolutionfixed
  • Status newclosed

In 29032:

Remove autocomplete from the database password screen on setup-config.php. Props hebbet. Fixes #28585.

Note: See TracTickets for help on using tickets.