From ede8fe9c97e58922780883aa4ff2f76421dc9a49 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Thu, 2 Oct 2008 21:24:13 +0000
Subject: [PATCH] Disabled autocomplete for bad browsers

---
 pages/index/1.php | 26 +++++++++++++-------------
 pages/index/4.php |  4 ++--
 pages/index/5.php |  4 ++--
 pages/index/6.php |  6 +++---
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/pages/index/1.php b/pages/index/1.php
index 0d1ba30..487f8a2 100644
--- a/pages/index/1.php
+++ b/pages/index/1.php
@@ -29,22 +29,22 @@
   </tr>
   <tr>
     <td class="DataTD" width="125"><?=_("First Name")?>: </td>
-    <td class="DataTD" width="125"><input type="text" name="fname" value="<?=array_key_exists('fname',$_REQUEST)?sanitizeHTML($_REQUEST['fname']):""?>"></td>
+    <td class="DataTD" width="125"><input type="text" name="fname" value="<?=array_key_exists('fname',$_REQUEST)?sanitizeHTML($_REQUEST['fname']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD" valign="top"><?=_("Middle Name(s)")?><br>
       (<?=_("optional")?>)
     </td>
-    <td class="DataTD"><input type="text" name="mname" value="<?=array_key_exists('mname',$_REQUEST)?sanitizeHTML($_REQUEST['mname']):""?>"></td>
+    <td class="DataTD"><input type="text" name="mname" value="<?=array_key_exists('mname',$_REQUEST)?sanitizeHTML($_REQUEST['mname']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Last Name")?>: </td>
-    <td class="DataTD"><input type="text" name="lname" value="<?=array_key_exists('lname',$_REQUEST)?sanitizeHTML($_REQUEST['lname']):""?>"></td>
+    <td class="DataTD"><input type="text" name="lname" value="<?=array_key_exists('lname',$_REQUEST)?sanitizeHTML($_REQUEST['lname']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Suffix")?><br>
       (<?=_("optional")?>)</td>
-    <td class="DataTD"><input type="text" name="suffix" value="<?=array_key_exists('suffix',$_REQUEST)?sanitizeHTML($_REQUEST['suffix']):""?>"></td>
+    <td class="DataTD"><input type="text" name="suffix" value="<?=array_key_exists('suffix',$_REQUEST)?sanitizeHTML($_REQUEST['suffix']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Date of Birth")?><br>
@@ -71,20 +71,20 @@
 	}
 ?>
     </select>
-    <input type="text" name="year" value="<?=array_key_exists('year',$_SESSION['signup']) ? sanitizeHTML($_SESSION['signup']['year']):""?>" size="4"></nobr>
+    <input type="text" name="year" value="<?=array_key_exists('year',$_SESSION['signup']) ? sanitizeHTML($_SESSION['signup']['year']):""?>" size="4" autocomplete="off"></nobr>
     </td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Email Address")?>: </td>
-    <td class="DataTD"><input type="text" name="email" value="<?=array_key_exists('email',$_REQUEST)?sanitizeHTML($_REQUEST['email']):""?>"></td>
+    <td class="DataTD"><input type="text" name="email" value="<?=array_key_exists('email',$_REQUEST)?sanitizeHTML($_REQUEST['email']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Pass Phrase")?><font color="red">*</font>: </td>
-    <td class="DataTD"><input type="password" name="pword1"></td>
+    <td class="DataTD"><input type="password" name="pword1" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Pass Phrase Again")?><font color="red">*</font>: </td>
-    <td class="DataTD"><input type="password" name="pword2"></td>
+    <td class="DataTD"><input type="password" name="pword2" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD" colspan="2"><font color="red">*</font><?=_("Please note, in the interests of good security, the pass phrase must be made up of an upper case letter, lower case letter, number and symbol.")?></td>
@@ -94,23 +94,23 @@
   </tr>
   <tr>
     <td class="DataTD">1)&nbsp;<input type="text" name="Q1" size="15" value="<?=array_key_exists('Q1',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['Q1']):""?>"></td>
-    <td class="DataTD"><input type="text" name="A1" value="<?=array_key_exists('A1',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A1']):""?>"></td>
+    <td class="DataTD"><input type="text" name="A1" value="<?=array_key_exists('A1',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A1']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD">2)&nbsp;<input type="text" name="Q2" size="15" value="<?=array_key_exists('Q2',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['Q2']):""?>"></td>
-    <td class="DataTD"><input type="text" name="A2" value="<?=array_key_exists('A2',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A2']):""?>"></td>
+    <td class="DataTD"><input type="text" name="A2" value="<?=array_key_exists('A2',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A2']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD">3)&nbsp;<input type="text" name="Q3" size="15" value="<?=array_key_exists('Q3',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['Q3']):""?>"></td>
-    <td class="DataTD"><input type="text" name="A3" value="<?=array_key_exists('A3',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A3']):""?>"></td>
+    <td class="DataTD"><input type="text" name="A3" value="<?=array_key_exists('A3',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A3']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD">4)&nbsp;<input type="text" name="Q4" size="15" value="<?=array_key_exists('Q4',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['Q4']):""?>"></td>
-    <td class="DataTD"><input type="text" name="A4" value="<?=array_key_exists('A4',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A4']):""?>"></td>
+    <td class="DataTD"><input type="text" name="A4" value="<?=array_key_exists('A4',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A4']):""?>" autcomplete="off"></td>
   </tr>
   <tr>
   <td class="DataTD">5)&nbsp;<input type="text" name="Q5" size="15" value="<?=array_key_exists('Q5',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['Q5']):""?>"></td>
-    <td class="DataTD"><input type="text" name="A5" value="<?=array_key_exists('A5',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A5']):""?>"></td>
+    <td class="DataTD"><input type="text" name="A5" value="<?=array_key_exists('A5',$_SESSION['signup'])?sanitizeHTML($_SESSION['signup']['A5']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD" colspan="2"><?=_("It's possible to get notifications of up and coming events and even just general announcements, untick any notifications you don't wish to receive. For country, regional and radius notifications to work you must choose your location once you've verified your account and logged in.")?></td>
diff --git a/pages/index/4.php b/pages/index/4.php
index 8b16ae0..d8d210b 100644
--- a/pages/index/4.php
+++ b/pages/index/4.php
@@ -42,8 +42,8 @@ h1 {font-size:1.9em;text-align:center;}
 <? if(array_key_exists("noauto",$_REQUEST) && $_REQUEST['noauto'] == 1) { ?><input type="hidden" name="noauto" value="1"><? } ?>
 <h1><?=_("Login")?></h1>
 <p class='smalltext'><?=_("Warning! This site requires cookies to be enabled to ensure your privacy and security. This site uses session cookies to store temporary values to prevent people from copying and pasting the session ID to someone else exposing their account, personal details and identity theft as a result.")?></p>
-<label for="email"><?=_("Email Address")?>:</label><input type='text' name="email" value="<?=sanitizeHTML(array_key_exists("email",$_REQUEST)?$_REQUEST['email']:"")?>" /><br />
-<label for="pword"><?=_("Pass Phrase")?>:</label><input type='password' name='pword' /><br />
+<label for="email"><?=_("Email Address")?>:</label><input type='text' name="email" value="<?=sanitizeHTML(array_key_exists("email",$_REQUEST)?$_REQUEST['email']:"")?>" <? if(array_key_exists('notauto',$_REQUEST) && $_REQUEST['noauto'] == 1) echo " autocomplete='off'"; ?>/><br />
+<label for="pword"><?=_("Pass Phrase")?>:</label><input type='password' name='pword' autocomplete="off"/><br />
 <input type='submit' name="process" value="<?=_("Login")?>" /><br /><br />
 <a href='https://www.cacert.org/index.php?id=4'>Password Login</a> - 
 <a href='https://www.cacert.org/index.php?id=5'>Lost Password</a> - 
diff --git a/pages/index/5.php b/pages/index/5.php
index f0f18b5..0413a0c 100644
--- a/pages/index/5.php
+++ b/pages/index/5.php
@@ -22,7 +22,7 @@
   </tr>
   <tr>
     <td class="DataTD" width="125"><?=_("Email Address")?>: </td>
-    <td class="DataTD" width="125"><input type="text" name="email" value="<?=array_key_exists('lostpw',$_SESSION)?sanitizeHTML($_SESSION['lostpw']['email']):""?>"></td>
+    <td class="DataTD" width="125"><input type="text" name="email" value="<?=array_key_exists('lostpw',$_SESSION)?sanitizeHTML($_SESSION['lostpw']['email']):""?>" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Date of Birth")?><br>
@@ -49,7 +49,7 @@
         }
 ?>    
     </select>
-    <input type="text" name="year" value="<?=array_key_exists('lostpw',$_SESSION)?sanitizeHTML($_SESSION['lostpw']['year']):""?>" size="4"></nobr>
+    <input type="text" name="year" value="<?=array_key_exists('lostpw',$_SESSION)?sanitizeHTML($_SESSION['lostpw']['year']):""?>" size="4" autocomplete="off"></nobr>
     </td>
   </tr>
   <tr>
diff --git a/pages/index/6.php b/pages/index/6.php
index 8e3a1d2..acf21ab 100644
--- a/pages/index/6.php
+++ b/pages/index/6.php
@@ -76,17 +76,17 @@
 ?>
   <tr>
     <td class="DataTD"><?=$_SESSION['lostpw']['user'][$q]?></td>
-    <td class="DataTD"><input type="text" name="<?=$a?>" value="<?=sanitizeHTML(array_key_exists($a,$_SESSION['lostpw'])?$_SESSION['lostpw'][$a]:"")?>">
+    <td class="DataTD"><input type="text" name="<?=$a?>" value="<?=sanitizeHTML(array_key_exists($a,$_SESSION['lostpw'])?$_SESSION['lostpw'][$a]:"")?>" autocomplete="off">
 	<input type="hidden" name="<?=$q?>" value="<?=sanitizeHTML($_SESSION['lostpw']['user'][$q])?>"></td>
   </tr>
 <? } ?>
   <tr>
     <td class="DataTD"><?=_("New Pass Phrase")?><font color="red">*</font>: </td>
-    <td class="DataTD"><input type="password" name="newpass1"></td>
+    <td class="DataTD"><input type="password" name="newpass1" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Repeat")?><font color="red">*</font>: </td>
-    <td class="DataTD"><input type="password" name="newpass2"></td>
+    <td class="DataTD"><input type="password" name="newpass2" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD" colspan="2"><font color="red">*</font><?=_("Please note, in the interests of good security, the pass phrase must be made up of an upper case letter, lower case letter, number and symbol.")?></td>