Skip to main content
46 votes

How can I tell if my website visitors are using LastPass or other password managers?

Is there any way of identifying whether or not my visitors are using one of these plugins and how best to support it? By far the best way to support password managers is to use normal <form> ...
dotancohen's user avatar
41 votes

Are there other options besides HTTPS for securing a website to avoid text input warnings in Chrome?

is there any other way to make my connection secured ? Google isn't just complaining about "security" (which could include a number of different topics), it is specifically targeting encryption / ...
DocRoot's user avatar
  • 4,297
33 votes

How should I handle the problem of people entering others' e-mail addresses without annoying them with "verification" e-mails?

At its root, this is a problem about verifying ownership of an email address, and as far as I know there are only two ways to practically verify ownership of an email address: Send a verification ...
Maximillian Laumeister's user avatar
18 votes
Accepted

Should I replace fillable PDFs?

Normally, I recommend replacing fillable PDFs with regular web forms I think overall, yes, that would be the ideal solution, but you noted some of the the issues with this, which includes how to ...
Ryan's user avatar
  • 339
13 votes
Accepted

How can I tell if my website visitors are using LastPass or other password managers?

Yes. Users can install LastPass as a browser plugin. Thus you can rely on client side scripting languages to check if LastPass is installed. For instance, using NavigatorPlugins.plugins allows you ...
Billal Begueradj's user avatar
10 votes

Should I replace fillable PDFs?

You could try to force downloading of the PDF, so that it opens in the default application for viewing PDF files instead of the browser. See this question: How do I force files to open in the browser ...
Paul's user avatar
  • 209
9 votes

Is it valid to have multiple form input elements with the same name?

HTML5 The non-normative section 4.10.1.3 Configuring a form to communicate with a server explicitly says that it is valid: Multiple controls can have the same name; for example, here we give all ...
Ciro Santilli OurBigBook.com's user avatar
8 votes

Is a "Show Password" option on login form safe?

Apart from the obvious security issue of someone else being able to physically see what password you are typing - which the user would be aware of anyway - there are a few security "concerns" that ...
MrWhite's user avatar
  • 42.9k
8 votes

How should I handle the problem of people entering others' e-mail addresses without annoying them with "verification" e-mails?

There is not much you can do to avoid verification mails (in case you actually need to store and verify mails at all, of course): if you display it to users or sent mails to that address, you better ...
eckes's user avatar
  • 209
5 votes
Accepted

Is it considered spam to set "From: " header to the user's email in a contact form?

Using the user's email address as the 'from' address in a form notification email is not a good idea because it will trigger many spam filters due to a "spoofed" sender. There are two systems which ...
Ryan Griggs's user avatar
5 votes

Is a "Show Password" option on login form safe?

If we are ignoring everything else you mention, (i.e. shared computer, firefox saved passwords, etc.) the "show" password feature is, by itself, not a security risk. It is for convenience and the "...
Auzi's user avatar
  • 151
5 votes

Should I replace fillable PDFs?

There is no standard practise. You'll have to re-think your process: Why do your customers have to fill out PDFs in the first place? Do you just need structured data from the customer? Who needs the ...
knallfrosch's user avatar
4 votes
Accepted

Is a "Show Password" option on login form safe?

There is no inherent security issue with unmasking the password field per-sey. In the functional working of a site any method that can access form fields (such as server side posts or javascript) will ...
Chris Rutherfurd's user avatar
4 votes

Are there other options besides HTTPS for securing a website to avoid text input warnings in Chrome?

nobody else seems to have mentioned, if you own every machine that connects to your site eg "this is probably not what you want" , like a corporate setting, you can create a certificate ...
ThorSummoner's user avatar
4 votes

Are there other options besides HTTPS for securing a website to avoid text input warnings in Chrome?

If you're just serving static files or can put a proxy in front you could use a server like caddy server which handles all of this for you by using lets encrypt, this takes the pain out of ...
Kenny Grant's user avatar
4 votes

Are there other options besides HTTPS for securing a website to avoid text input warnings in Chrome?

I don't recommend, but you can bypass this message, by not using the original input text fields. You can create your own input fields, using regular div that have onkeypress event. Or you can create a ...
Aminadav Glickshtein's user avatar
4 votes

Why is Facebook Pixel firing the gtm.formSubmit event?

I just tried setting up the default form submission trigger in a client's GMB container and was having the same problem. After a little digging around in Preview mode, I came up with the following ...
Casey's user avatar
  • 41
3 votes
Accepted

Schema.org type for mobile carrier support

You could make use of the ContactPoint type to represent the support chat. For the contactType property, Schema.org doesn’t define any values. Google, for their Corporate Contacts feature, recognizes ...
unor's user avatar
  • 21.8k
3 votes

How can I tell if my website visitors are using LastPass or other password managers?

Most of these password managers are browser plugin based and work by populating the form fields and triggering a form submission as if the ueer pressed the submit button, to the server it appears as a ...
Chris Rutherfurd's user avatar
3 votes

Google Business Email Will Not Receive Online Web Form Sent Mail

This is a common problem when sending mail from a site on a shared hosting account that has its mail hosted offsite. What your host needs to do is disable local mail delivery for your domain name. ...
Tim Malone's user avatar
  • 1,256
3 votes

How can I determine where a login form is submitted?

You're right that the form will be submitted to https://squareup.com/mp/login, and that when you just put that URL into a browser, you get a 404. That's because when you type web addresses into a ...
Brett Donald's user avatar
3 votes

Does a contact form need to ask the user for explicit permission to be GDPR compliant?

I have a contrary opinion on this. I don't believe your checkbox collects any additional consent from the user that just submitting the form does, so I believe the checkbox can be removed because it ...
Maximillian Laumeister's user avatar
3 votes
Accepted

Form submission tag not fired

Based on the information from the preview function, the event is not being sent at all as the conditions for the trigger are not met. In the first, the form is submitted but the page path does not ...
GeoffAtkins's user avatar
  • 2,277
3 votes
Accepted

How to get hCaptcha work with contact form 7 (WordPress)?

Inserting external shortcodes into Contact Form 7 won't work by default. However there is a plugin https://wordpress.org/plugins/contact-form-7-shortcode-enabler/ which enables you to do that. I have ...
Steve's user avatar
  • 8,513
2 votes

How can I tell if my website visitors are using LastPass or other password managers?

To answer the actual question, one way to detect if users are using Lastpass is to provide some type of login field and use jQuery or similar to see if Lastpass has inserted the "background-image" it ...
Keith M's user avatar
  • 163
2 votes

How can I tell if my website visitors are using LastPass or other password managers?

You can use Javascript to detect the typing speed in the username/password fields. A variable rate suggests someone is typing it in manually while a constant rate or even no keystrokes at all (copy-...
André Borie's user avatar
2 votes

What kind of spam is this on our form?

The spammer is probably following this pattern, adapted from legitimate SEO folks who test Google indexing: Find a few long strings that return no Google results. Submit the strings to your form ...
Tim Grant's user avatar
  • 529
2 votes

Tracking users between sites using contact forms

You can use Google Analytics to do cross-domain tracking: https://support.google.com/analytics/answer/1034342?hl=en The problem with using cookies is they are assigned to a particular domain and a ...
psiclone's user avatar
2 votes
Accepted

Using user email address as "From Name" and domain email as sender in contact forms?

Yes, that's an acceptable practice. You could also append the users name and e-mail to the subject line or content if you want that information to be more visible to the recipient.
nathangiesbrecht's user avatar
2 votes
Accepted

Google Tag Manager - Trigger on asynchronous form

1- Send data to the dataLayer First step is to let GTM know that the form was submitted correctly. For that, you can use a custom dataLayer.push() into the callback function which is invoked upon a ...
Emirodgar's user avatar
  • 3,817

Only top scored, non community-wiki answers of a minimum length are eligible