Admins - Be aware of your browser!

[dremits]

To all forum admins,

Did you know that your browser could be messing up your forums, sometimes without you realising it.

I say this because if you have a browser that may have a feature to automatically fill in web forms, whether it is built in or in plug-in form then watch out because along with the obvious security concern of your browser storing your data you must watch out when administrating becuase your browser may automatically fill in your forms when you may be administrating a user or any page that has a form and you may save without realising. For example, Firefox uses an password manager and if you choose to remember a password when logging into your forum then Firefox will fill out username and password fields on any page of your forum including the admin panel which could change a users password to the one you have stored.

To avoid this, configure your browser so that it does not remember form information for your web site (In Firefox, go to Tools > Options > Security > Exceptions under Passwords).

 

[XcapeX]

Wow interesting..didn't know I could do that even lol.

 

[dremits]

I learned the hard way. ~biggrin~

 

[Cloverfield]

Thanks for that.

 

[MNDF]

Aye, I noticed this the first time I went to change a user's profile (I was making a test user) and went "hmm".

Thanks for showing a way to stop it without having to remember 😛

 

[dremits]

No problem

 

[CyberFreak]

I never have and never will save username/password information of any forum that i am staff of or any login page like cpanel where alot of damage could be caused.

 

[dremits]

What do you mean?

 

[CyberFreak]

I never let my browsers remember any login information for any forum where i am an admin or moderator. I also never allow it to remember passwords for cpanel as someone can easily log in.

 

[dremits]

Yeah that's what I was saying.

 

[Kevin X Dragon]

How do you know this? -?-

 

[froggyboy604]

Thanks for the info. I check my Browser config. now.

 

[dremits]

How do you know this? -?-

I noticed when I was editing a user.

 

[CavsFan23]

Damn, never knew that could happen. Thanks for the info.

 

[Mudjosh]

I believe there is a mod either in beta or in RC that stops this from happening.. Obviously others have been annoyed with it as well..

 

[Ste1]

Thanks for the warning. 🙂

 

[ℓєσ gнσѕт]

I clear my cookies everytime I close my browser, and sometimes every hour or so. There are scripts out there that can steal the cookies directly from your browser. Dont believe me?
http://www.criticalsecurity.net/index.p ... topic=7137

Scary stuff.

 

[Ascent]

Thanks for letting us know!