Complex password are no being accepted

[feriksson]

Hello to all !! i am a newbie on this web-world ! i just installed the version 4.3 of Userpice. When i tried to changue the admin password to something like this (not exacly, but symbols are being respected)

oldpw: password
Newpassword: Tywall86{3bc1fe685386cc4c3ab89a3f76566d8931e181ad17f08aed9ad73b30bf28114d}$&
Re-type pass: Tywall86{3bc1fe685386cc4c3ab89a3f76566d8931e181ad17f08aed9ad73b30bf28114d}$&

i got a error wich says "New Password and Confirm New Password must match".

The problem it's them already Match (Checked like 5 times), then if i remove the symbols from the password content, it will changue with no problems.

Thx !

[mudmin]

Percent symbols can almost never be used in passwords because they're an html escape character. Try it without the {3bc1fe685386cc4c3ab89a3f76566d8931e181ad17f08aed9ad73b30bf28114d} and see if you get the same result.

[Brandin]

If it works...we will need to find a solution for this, we should allow all special characters. I've always hated applications that die because of special characters.

[feriksson]

Hello mudmin. Tryed all the posible combinations and the problem it's with the character "&", it's not being accepted as password character.

It's weird i am using this character "&" on all my web-plataforms as part of my password, wp, ferozo, etc. Maybe a warning/ban can be added to avoid users get mess with it.

Thx for your time, and srry for my bad-english.

[Brandin]

It's the And (&) sign-we've had this problem before. I thought we patched it, but maybe we only patched it on one page? Or maybe I only patched it in my own project...I know there was an issue with < and > characters too...we should work on a solution for this. Can you report a bug at userspice.com/bugs?

[feriksson]

Well. Tryed to register on the "Mantis" system at www.userspice.com/bugs

Couldnt finish the register process on the plataform, the served mailed me a corrupt verification link to my email, even the mail has corrupt characters not being enconded correctly (Adding 2 pics).

[shoropio]

I got the same result in http://www.userspice.com/bugs

[Brandin]

We're aware it's broken-you can login no problem without the verification though.

[feriksson]

Well, corrected the link from :

https://userspice.com/bugs/verify.php?id...icLkfTE6t6=vwnncQsK5R310TU230RUxjUx14j3cVyPQgwNSbGJEjLjYUDaQuddG_7dth-MLY8YP5DP_T
to
https://userspice.com/bugs/verify.php?id...LY8YP5DP_T

and seems it worked.


The verification it's needed, couse the system lest you set your password just inside the activation link, so you cant access before activation.

Thx for the time !

[Brandin]

Thanks @feriksson.

@mudmin - can you see about correcting that link? It's adding an equal side in the middle of it.