create_account password question

[technoczech]

Hi,

 

On create_account (sign up):

 

-Fill in fields including the password field, but leave one of the fields like First Name blank (to make it error out)

-Click Continue

-An error about First Name being blank appears, but the password field has been cleared, so the customer has to re-enter the password as well as the First Name field.

 

Is there a reason the password data is removed from the field? All the other fields keep their data. If I wanted to make the password data remain, how would I do that? As far as I can tell, the code for all the fields is the same (but since it's behaving differently, the code has to be different somewhere...)

 

		if (strlen($password) < ENTRY_PASSWORD_MIN_LENGTH) {
     	$error = true;
		$messageStack->add('create_account', ENTRY_PASSWORD_ERROR);
   	} elseif ($password != $confirmation) {
		$error = true;
		$messageStack->add('create_account', ENTRY_PASSWORD_ERROR_NOT_MATCHING);
   	}

 

I can see where everything is written to the db if $error==false, but I can't see where the page is reloaded when $error==true.

 

Please help! Thanks!

[technoczech]

In case anyone comes across this later, I've since been told that the password field is supposed to be cleared to prevent anyone else from obtaining it. I'm updating my error messages that appear at the top to tell customers that they'll need to re-enter the password field as well as whatever field they entered incorrectly.