SuperGenPass is submitting blank passwords

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate
star

SuperGenPass is submitting blank passwords

raterus
I bank with BB&T, and use SuperGenPass to log in.  I'm having a problem when I use SuperGenPass, enter my master password and hit enter.  I've tracked the HTTP post and determined that the password being posted is blank.  There is also another issue where after SuperGenPass fills in the form, the page automatically submits (probably javascript on their end)

However if I type my master password, and click the "Submit" button on SuperGenPass, the password fills in properly, the page does NOT automatically submit, but I'm able to log in once I hit their login button.

Not sure whether this is a supergenpass issue, or just some terrible javascript handling on their end.  But perhaps you wanted to look at it yourself.

To get to the login page, do the following
1) http://www.bbt.com
2) Enter a username (just make up one, it's not validated)
3) On this next page is where I am having SuperGenPass issues.  Obviously you won't be able to log in, but you should be able to see that the password submitted is empty.

Oh, I'm using FireFox 3.6.8
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate
star

Re: SuperGenPass is submitting blank passwords

ChrisSGP
Administrator
They are indeed listening for the enter or return key, regardless of focus. Without even using SuperGenPass, you can click anywhere on that page (to remove focus from the password field) and then press enter. The form will submit and the page reloads. SuperGenPass cannot disable this behavior, so the solution is unfortunately to either:

1. Use SGP's submit button, as you suggest.
2. Type your master password in the page's password field, THEN run SGP and press enter.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate
star

Re: SuperGenPass is submitting blank passwords

raterus
Thanks Chris, I never realized you could type the master password into their field, and then just run supergenpass.  That does work, I just have to remember to do that.

Now I'm just wondering being a web programmer myself if there isn't an possible fix to SuperGenPass in situations like this where it catches the <enter> key event and somehow traps/rewrites the event so it doesn't bubble up to the page to be further handled.

I could also contact them and see if they'd fix their javascript, not like that would ever happen!
Loading...