Event with simple password

I didn’t have any caching enabled. But cleared the browser cache all together.

When I am logged in the site as admin with Google Chrome, I can book an event with set password “123”.

When I am browsing the site with Firefox as guest (not logged in), Firefox’s saved password function always tries to fill in the password field #_PASSWORD with a previously saved password. I delete that and enter the correct 123 password, but I get the “You’re not allowed to do this. If you believe you’ve received this message in error please contact the site owner.”

I then delete the password saved by Firefox for this domain in the Firefox settings. And then I can book with Firefox as guest with password “123”.

I tried in Internet Explorer (seldom used) and I could book with password 123 as guest.

Is the password field #_PASSWORD easily recognised by the browser as a password field and that messes things up? What do I know. Speculating.

I can’t send confirmation mails from this dev site. That is most likely because the zealous smtp settings of Office 365. But the bookings go through.

• This reply was modified 6 years, 7 months ago by Argentum.

There is a hidden field added to the form (a honeypot field that only bots fill out), and for some reason your browser has a value for this field … .
The latest dev (just done) disables (or tries to) autocomplete on both the hidden honyepot field and the password. Also a new generic option has been added to disable the honeypot field entirely.

Great. Uploading it now.

Finds:

Honeypot enabled.
Logged in admin Google Chrome, booking works.

Guest with Fireworks with no stored passwords for site, booking works.

Then logging in to Fireworks as admin and storing the password (remember me). Logging out again and going to page to book. The password field is prepopulated with a long password (likely my admin account password). I delete the prepop. password and enter 123 and fill out the rest. I can’t book. I get the error message orange frame over the form with no message attached.
<div id="eme-rsvp-addmessage-error" class="eme-rsvp-message eme-rsvp-message-error" style="display: block;"></div>

Honeypot disabled.
The booking works in all cases. The password field is prepopulated with my saved password, but I can delete it and enter 123 and the booking goes through.

No message? Now that’s not good ?? I’ll check the code again (Edit: fixed in code)
But it seems browsers are happily ignoring auto-complete indicators (some say Chrome, others say firefox … but it seems to become a pain in the ***).

• This reply was modified 6 years, 7 months ago by Franky.

It’s a rare use case of course with a user that has a password saved for the site, trying to book logged out.

Let me know if you update the dev version that I can download.

Dev already updated, but no way to prevent autocomplete, so …
I also have a saved pwd and using Firefox, but here that doesn’t happen.

Well, it’s a rare use case. With honeypot disabled it doesn’t happen for me. I’ll upload the last dev version and give it a go. Thanks for all your effort!