Re: [Postfixadmin-devel] SF.net SVN: postfixadmin:[482] trunk
Brought to you by:
christian_boltz,
gingerdog
From: Christian B. <pos...@cb...> - 2008-11-23 12:20:20
|
Hello, Am Samstag, 22. November 2008 schrieb David Goodwin: > Christian Boltz wrote : > > c) add a "show password" link (with a $CONF setting to enable it, > > default should be disabled) which displays the password > > somewhere (using flash_info or a alert() feeded with a AJAX > > request) This would have some advantages: > > - it works in every browser, not only if you have some extension > > - it only transfers the password on request - which reduces the > > risk (and number) of passwords in browser cache etc. a lot - it > > fixes all the problems in edit-mailbox I described above - it would > > easily allow to mail a notification to the user, which might be > > required by some people/companies for privacy or policy reasons > c) sounds good, but I've no motivation to write it; so either we > ditch the change, or someone writes a patch... I reverted the patch for now (r485) - and opened a feature request so that we don't forget about it: https://sourceforge.net/tracker/index.php?func=detail&aid=2332595&group_id=191583&atid=937967 > (So far, Postfixadmin is AJAX free, perhaps it should stay this way?) I don't want to do "big" things with AJAX. But I don't see a problem in using something like alert($password_fetched_by_AJAX_request) The fallback could be that the "show password" link uses flash_info for this - with the disadvantage of causing a page reload (and possibly loose changes). BTW: I don't see a real problem with AJAX - nearly every browser I know supports it. OK, you could argue with lynx or even netscape 4 ;-) - but people using lynx are probably the same that do a quick query in MySQL if they want to find out the password. And people using netscape 4, well, that's their own fault *g* Regards, Christian Boltz -- My Trash Can is also a shortcut for Amarok... I guess the Amarok team must have had some wild thoughts about the features of their program =) [Benjamin Bach in opensuse] |