RexNoctis
01-09-07, 03:52
Hi all,
Is it possible to write a HTML form in such a way that it will force IE to forget the password and/or not offer to save it?
We have a web access to one of the clinical systems at the hospital where I work. Each user has a domain logon to the network, so having IE save passwords is not a huge security problem. The problem comes when the passwords expire and the user changes it. They don't get the fact that they have to change the saved password at least once!
This really came to a head when the software company rolled back the user database by accident during a server move/upgrade. We received about 500 password reset requests over 3 days, then had to explain to about half of them that the password does not change automatically. rolleyes (By the end I really wanted to scream at some of them! What would be the point in having a bloody password!)
</rant>
Sorry :)
Any ideas?
Is it possible to write a HTML form in such a way that it will force IE to forget the password and/or not offer to save it?
We have a web access to one of the clinical systems at the hospital where I work. Each user has a domain logon to the network, so having IE save passwords is not a huge security problem. The problem comes when the passwords expire and the user changes it. They don't get the fact that they have to change the saved password at least once!
This really came to a head when the software company rolled back the user database by accident during a server move/upgrade. We received about 500 password reset requests over 3 days, then had to explain to about half of them that the password does not change automatically. rolleyes (By the end I really wanted to scream at some of them! What would be the point in having a bloody password!)
</rant>
Sorry :)
Any ideas?