RE: [WEB400] How Do I Keep IE From Saving Values

["Bob Cozzi" <cozzi@xxxxxxxxx>]

You can use AutoComplete="OFF" on a form field as well as the form itself:

<INPUT name="CCNBR" TYPE="TEXT" SIZE="16" AutoComplete="OFF">

Work on IE 5.0 and later.
It also sort of works with FoxFire, but FoxFire seems to treat a field-leve
AutoComplete the same as a FORM-level AutoComplete, that is it turns off
AutoComplete for the entire form if any of the fields in that form have
AutoComplete="OFF" specified.

Bob Cozzi


-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
Behalf Of Joe Giusto
Sent: Wednesday, December 08, 2004 11:37 AM
To: Web Enabling the AS400 / iSeries
Subject: RE: [WEB400] How Do I Keep IE From Saving Values

Thank you.  I will have to work with this.  But there is still the
possibility of the same name being generated if the someone comes back to
the page at the same time on another day.  (figuring after this has been
running a few months that it is bound to happen).  I am also not using
xTools or CGIDEV2 so I am stuck using the QtmhCvtDb API to convert to
database fields, which requires a file name from which to retrieve the field
names.  So I am not sure how to resolve to the random field names.  Then
again, I could just scan the environment string for the randomly generated
field name and get the value that way.  hmmm....

I did find while searching a way to make the whole form not save the field
values in IE (and hopefully it works the same in other browsers as well) by
specifying AUTOCOMPLETE="OFF" in the form definition.

<FORM ACTION="PGMNAME.PGM" METHOD="POST" AUTOCOMPLETE="OFF">



 -----Original Message-----
From:   Bob Cozzi [mailto:cozzi@xxxxxxxxx] 
Sent:   Tuesday, December 07, 2004 7:47 PM
To:     'Web Enabling the AS400 / iSeries'
Subject:        RE: [WEB400] How Do I Keep IE From Saving Values

You dynamically generate a random name for the credit card field in the HTML
form. Something like:

<INPUT name="CCFIELD" TYPE="HIDDEN">
<INPUT name="/%CCFIELD%/" TYPE="TEXT" SIZE="16">

Then use a timestamp or something similar as follows:
     D random          S             20A   Varying
     D prefix          S              2A   Const('CCN')
     D tmstamp         S              6S 0
     D cardNbr         S             16A

     
     C                   time                    tmstamp
     C                   eval      random = prefix + %char(tmstamp)
     C                   callp     cgiSetVar('CCFIELD': Random)

Then in your CGI program that receives the form with the keyed-in credit
card number, you retrieve the form field name first, then the credit card
field value itself. Something similar to this:


     C                   callp     cgiInit()

     C                   eval      random = cgiGetVar('CCFIELD')
     C                   eval      cardNbr = cgiGetVar(Random)


This is using RPG xTools' CGILIB, but will work the same if you have
CGIDEV2, just change the procedure names.

-Bob Cozzi
www.rpgxtools.com

_______________________________________________
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.