Logging into DS- password shown on screen

I just logged into Devshed in Firefox on a WindowsXP machine here in my university. I put the focus in the Username textbox at the top left part of the screen and typed my username. I then hit TAB and started to type my password. However, TAB brought the focus to the Username textbox in the center of the screen- and there was my password, for all to see.

I don't know if the problem affects only Firefox, and I would assuem that it affects all other vBullitin forums as well, and on other OS's. I've no account with vBullitin to file a bug, but I think that Devshed should either correct this, or file a bug.

Never happened to me before... I log in like that all the time...

Doesn't happen with me either. Just checked the log-in on here and on DevH and neither show password on input - XP SP2 & FF.

The problem is one screens with two log in tables, the usual one in the upper left hand corner of the screen and the large one in the center of the screen. This occurs when you hit UserCP without being logged in, for instance.

The bug is in the fact that TAB brings the focus of the cursor from the Username textarea of the little login table to the Username textarea of the big login table.

Most vB's don't have the little login table at the top of the page, so it would be a devshed bug. i presume you're talking purely about pages you `can't view unless you login`?

I logged out and then hit usercp and have the login in the middle of the screen, still doesn't show password. What version of FF are you using ?

Version 1.5.0.1 here at home. At the university I'm not sure what it was.

I just confirmed it here. Log out, then hit UserCP. You are faced with two login tables, one in the top left corner, and another large one in the middle of the screen.

Put the focus in the Username field of the top left corner table and enter your username. Now TAB. Now enter your password. See it?

If you tab from the first username field, it gives focus to the
second username field, so if you type your password in there
of course you will see it - it's just a text box.

That's exactly the bug. When I type my username I hit TAB to go to the next textbox. That should be the password field. It's a design error. The JS that makes the Username field default should be removed- it is dangerous to those who use the little login box. Or, the little login box should be removed.

Or must I use the mouse to get around the page? You could then categorize it as an accessability issue.

The issue isn't with the JS, it's that the 'tabindex' is set up in the
wrong order. Yeah, that should be fixed, but it's not 'dangerous'.
You should just be paying attention to what you are typing.