[SOLVED, added workaround for browser auto-complete] Author manager, user edit form asks to confirm password on every save ?

Hi. Maybe a silly question but I can't seem to find out the answer.

When using the Author Manager in Flexicontent backend, before saving any configuration changes for a particular author/user Joomla (3.4.5) will ask to "confirm password." The Super User has only access to the users encrypted password and so it is impossible to save these changes..... unless I am missing something!

Hello

tested just now, it does not ask
which version do you have ? (always mention this !!)

Thanks. FLEXIcontent v3.0.9-2015_11_17 (v3.0.9-rc4), however, this is not a Flexicontent error.

What was occuring was the password box was being filled by browser autofill.

Solved by removing any entries in the password or confirm password boxes and then the item will save (or by removing autofill)

Hello

yes i have seen this myself too
no clean solution for instructing browser not to do this on this page (or do you have one to suggest ?)

i am quoting an answer from
stackoverflow.com/questions/2530/how-do-...form-field-input-tag

Most of the major browsers and password managers (correctly, IMHO) now ignore autocomplete=off.

Why? Many banks and other "high security" websites added autocomplete=off to their login pages "for security purposes" but this actually decreases security since it causes people to change the passwords on these high security sites to be easy to remember (and thus crack) since autocomplete was broken.

Long ago most password managers started ignoring autocomplete=off, and now the browsers are starting to do the same for username/password inputs only.

Unfortunately bugs in the autocomplete implementations insert username and/or password info into inappropriate form fields, causing form validation errors, or worse yet, accidentally inserting usernames into fields that were intentionally left blank by the user

Thanks, yes a contentious topic and literally dozens of suggested hacks.

In checking further this may apply only to Firefox - I have checked on Chrome, IE and Edge it doesn't occur.

What I have observed however is that in the native Joomla 3.4.5 User Manager the autocomplete does not occur, i.e. for the same user tested in the Flexicontent User Manager where the autocomplete does occur.

The Joomla User Manager does use:
<div class="controls">
<input type="text" style="display:none">
<input type="password" name="jform[password]" id="jform_password" value="" autocomplete="off" class="validate-password" size="30" maxlength="99" /></div></div>

The Joomla solution is based on:

github.com/joomla/joomla-cms/issues/7054
github.com/joomla/joomla-cms/pull/7094

This is specifically addressed to Firefox.

Hello

the workaround that joomla uses, does not work on firefox anymore

but using instead of
i have commited fix for v3.0.9