629888 - changing password for my account in some pages assigns it to email instead of username

Status: RESOLVED DUPLICATE of bug 1583576

(Toolkit :: Password Manager, defect)

Description

[Bastard]

User-Agent:       Mozilla/5.0 (Windows NT 6.1; rv:2.0b10) Gecko/20100101 Firefox/4.0b10
Build Identifier: Mozilla/5.0 (Windows NT 6.1; rv:2.0b10) Gecko/20100101 Firefox/4.0b10

Some webpages don't use standard forms, so when I have an account created there, and I change the password for my account, the password manager asks me if I want to save the new password, but happens that saves the new password setting as username my email address instead of the username itself, that was stored previously in the password manager.

There are several sites where this issue affects.

Reproducible: Always

Steps to Reproduce:
1. Go to some of these webpages:
http://www.linuxjuegos.com/foro/index.php
www.filmaffinity.com/

2. Create an account and verify it. The password will be stored in password manager for you username

3. Change the password for your account. 
Actual Results:  
Notice that password manager will prompt you to update the password, but will use as username your email address, that does not apply to the website (you still will be logged with the old password)

Expected Results:  
Should save the password to the username.

To make things more complicated, there are websites where both username and email address are possible to be entered for login.

Comment 1

[Bastard]

www.gsmspain.com is also affected.

Comment 2

[aravindm]

Mozilla/5.0 (Windows NT 6.1; rv:2.0b11pre) Gecko/20110130 Firefox/4.0b11pre

Able to reproduce. Saving the old username and password and then again changing the password, will assign the same to the mail id instead of username.

Comment 3

[juan becerra [:juanb]]

What I noticed was that when I registered it asked me to enter a username and an email address, and after entering all required fields, the login page came back with my email address pre-filled in on the username field. The registration form differentiates between these two, though. So the password manager should be entering the username and not the email address.

Comment 4

[Bastard]

Issue happening with latest firefox 40.b10

Comment 5

[Paul O'Shannessy [:zpao] (not bugmail, email directly)]

The hard part here is that Firefox doesn't differentiate. It assumes the field before the password field is the "username" field (the field used to login). That's not the case 100% of the time, but it often works. There are too many variations on form design to look at field ids or names with much more accuracy.

Comment 6

[Bastard]

That may be workarounded don't asking to save passwords in registration forms, but doing it in login forms themselves (or quick login used in PHP forums). I think in this case Firefox is trying too early to get stored the user and password from the website to save some kind of work to the user later.

Notice also that this sometimes doesn't work. Some forums, when you register, Firefox asks to save password and in the forums you seem logged in (your forum's username appears at the corner) but if you close the window and go again you are not really logged in, you need explicitely to use the login form to post messages or something (I guess it has something to do with the authentication or cookies or something). Furthermore, other forums besides from registration, require you to confirm the email address.

Comment 7

[Matthew N. [:MattN]]

I don't think we need to keep this bug open separate from bug 1583576.