443800 - Firefox stores wrong user name if multiple text fields are present

Status: NEW

(Toolkit :: Password Manager, defect, P3)

Description

[Volkmar Kostka]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9.1a1pre) Gecko/2008070504 Minefield/3.1a1pre
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9.1a1pre) Gecko/2008070504 Minefield/3.1a1pre

For several sites like the mozillazine forum the sequence of the text fields is user name, email, email, password. In this case the email is stored as username.

First mentioned here:
http://forums.mozillazine.org/viewtopic.php?f=38&t=719055

Reproducible: Always

Steps to Reproduce:
1. go to e.g. the mozillazine register page.
2. Enter your data
3. register
4. Save the password.
5. Check the stored user name and password
Actual Results:  
The email address is stored as username.

Expected Results:  
Username/Password not stored.

Refuse to store the password if it is not clear what the user name is. And it is not useful to store the user name/password at all in such a condition because it is not clear how to fill in the data on a later visit.

Comment 1

[erelsgl]

This bug is very common in sites of banks and other organizations, that have 3 login fields: username, password and personal id. I think it is important that Firefox Password Manager supports such sites.

Comment 2

[Matthew N. [:MattN]]

(In reply to erelsgl from comment #1)
> This bug is very common in sites of banks and other organizations, that have
> 3 login fields: username, password and personal id. I think it is important
> that Firefox Password Manager supports such sites.

Could you please provide example URLs as some sites may be fixable while others aren't?

Comment 3

[erelsgl]

Here are some URLs. They are partially Hebrew sites, but you can easily detect the login form with the 3 fields.

http://www.leumit.co.il/eng/home/ - on the right there is a form with username, password and id.
https://bank.postil.com/id.asp    - again form with username, password and id.
https://www.bankhapoalim.co.il/ - on the right, a form with username, id and password (note the reverse order)

Comment 4

[Matthew N. [:MattN]]

(In reply to erelsgl from comment #3)
> Here are some URLs. They are partially Hebrew sites, but you can easily
> detect the login form with the 3 fields.

Are you wanting Firefox to store all three pieces of information? If so, then that's a separate bug. This is about storing the wrong field as the username which is similar but doesn't necessarily require the same solution. Do you know any other password managers that support this?

Comment 5

[erelsgl]

In the future it could be good to store all 3 pieces of information, but currently it is sufficient that Firefox just stores the correct username and password, while leaving the ID field empty.

Comment 6

[erelsgl]

I think it should be easy to detect the password field because it has "type='password'".

Comment 7

[Matthew N. [:MattN]]

We don't have a problem detecting the password, it's what we detect as the username that may not be ideal (and that's what the bug summary says). Try Firefox Beta (29) with the pref "signon.overrideAutocomplete" set to true if the password isn't getting saved at all. https://www.mozilla.org/firefox/beta/

File a new bug if you see different issues (or find an existing one about the same issue).

Comment 8

[Chris Karlof [:ckarlof]]

Recipes could help with this.