IE 6 xpsp1 user name/password prompt

[danmaday]

I have autocomplete turned off in IE6 and yet when I get a password request from a website I http'ed to the "user name:" box has a drop down list which contains the user names for my two e-mail accounts.

I am new to web site building and am reading a book on PHP. In the book it says that the password form is located locally and an www authentiate from the remote site launches that form. The problem is I don't know how to empty the drop down list. Autocomplete has an option to erase passwords and supposedly everything else but it does not clear out the drop down list. I searched the registry and could find nothing.

Also, as an aside, can the remote site see/retrieve the contents of the drop down list in the password box?

Thanks

Dan Maday

[vass0922]

ahhhh another beltway beater
Sorry you're stuck in DC too

Did you try the Reset Forms button on the autocomplete form?

According to MS no a website doesn't actually see the contents of that drop down list as it is stored locally. However, I wouldn't be suprised if there is a vulnerability to allow it

I believe the information is stored in a .dat file somewhere in your profile.
Don't think it would do any good to do a search for it as MS typically doesn't use plain text to store stuff.

[danmaday]

Actually my location is a glorious 57 mile ride to DC every day each way for 2 hrs from the wilds of VA. You know Loudoun County where you can find a field of trees to raise you spirits and then, quick, pave them over and build your $600,000 dream house.

Anyway I digress, I tried to search Microsoft and, frankly, I have a hard time describing my question. What is the official name of the User Name/Password box? Is it the "connect to" form, the " log in " form?

Anyway I have a second user and I will try that and see if the drop down list disappears.

Thanks very much for reading and responding to my question.

Dan Maday

[danmaday]

Actually found the answer on Microsoft tech support. In user accounts on the control panel there is an option that says usernames for user that is not part of a domain. Clicked there. The names appeared. I erased them.

This end this thread.