Yes, Firefox is wonderful, and seems to have a lot less critical hack your system flaws than IE....if you are using IE, then I can understand why you feel that security isn't an issue, since you are pretty clueless about how terrible Microsoft is about security holes.DavidIQ wrote:Bottom line is it WILL be a nuisance no matter how much YOU think it will not be.
I hate to break the news to you but not everyone uses FireFox (not sure if Chrome has this) so the feature you mentioned that the username field is filled in automatically will not be available on all browsers and not everyone has enabled. It certainly isn't a feature of IE. You're trying to "push" a feature that you think is going to be beneficial without stopping to think if:
1. Anybody will use it besides yourself
2. Taking into consideration the work that will be needed to both have it on a switch and have it work correctly. (this corresponds to 1...does the benefits and amount of usage outweigh the work required?)
Sorry but as I see it right now, besides saying that you think it's a good idea, you've not provided any convincing arguments of why this is even a good idea and have not provided any examples of places where this has been done and has been successful.
As a matter of fact, it was a corporate security guideline at a major US Telecom that I worked for, and we ended up spending many man-hours splitting them out from each other for internal applications. Giving someone half the keys to your kingdom is just plain DUMB, no matter what YOU think. Before you start spouting off about security, maybe you should stop and think if:
1. Anybody will try to hack your systems (the answer is a RESOUNDING YES)
2. How *beep* off your users would be if their information was stolen because you didn't have adequate security in place. Forums I administer have a lot of personal information in them....not stuff that people want some hacker in China getting out and using to steal their identity. (the answer is a variable answer from a little bit for some piddly software support forum to a RESOUNDINGLY *beep* OFF for a forum that handles personal information)
Then, stop and think, is forum security worth the little bit of effort it would take for you to ALWAYS program your software to use a logon_name field that is separate from the display_name field, regardless of whether or not they are the same value (a user defined switch setting in the board configuration that can be defaulted to "Username is Displayname" with the option of "Username is not Displayname")? The answer, if you can anything about your user community's safety and security, needs to be YES.