+- UserSpice (https://userspice.com/forums)
+-- Forum: Support Center (https://userspice.com/forums/forumdisplay.php?fid=23)
+--- Forum: UserSpice 4.3 and Below (https://userspice.com/forums/forumdisplay.php?fid=26)
+--- Thread: Complex password are no being accepted (/showthread.php?tid=982)
Pages:
1
2
Complex password are no being accepted - feriksson - 02-27-2018
Hello to all !! i am a newbie on this web-world ! i just installed the version 4.3 of Userpice. When i tried to changue the admin password to something like this (not exacly, but symbols are being respected)
oldpw: password
Newpassword: Tywall86{3bc1fe685386cc4c3ab89a3f76566d8931e181ad17f08aed9ad73b30bf28114d}$&
Re-type pass: Tywall86{3bc1fe685386cc4c3ab89a3f76566d8931e181ad17f08aed9ad73b30bf28114d}$&
i got a error wich says "New Password and Confirm New Password must match".
The problem it's them already Match (Checked like 5 times), then if i remove the symbols from the password content, it will changue with no problems.
Thx !
Complex password are no being accepted - mudmin - 02-27-2018
Percent symbols can almost never be used in passwords because they're an html escape character. Try it without the {3bc1fe685386cc4c3ab89a3f76566d8931e181ad17f08aed9ad73b30bf28114d} and see if you get the same result.
Complex password are no being accepted - Brandin - 02-27-2018
If it works...we will need to find a solution for this, we should allow all special characters. I've always hated applications that die because of special characters.
Complex password are no being accepted - feriksson - 02-27-2018
Hello mudmin. Tryed all the posible combinations and the problem it's with the character "&", it's not being accepted as password character.
It's weird i am using this character "&" on all my web-plataforms as part of my password, wp, ferozo, etc. Maybe a warning/ban can be added to avoid users get mess with it.
Thx for your time, and srry for my bad-english.
Complex password are no being accepted - Brandin - 02-27-2018
It's the And (&) sign-we've had this problem before. I thought we patched it, but maybe we only patched it on one page? Or maybe I only patched it in my own project...I know there was an issue with < and > characters too...we should work on a solution for this. Can you report a bug at userspice.com/bugs?
Complex password are no being accepted - feriksson - 02-27-2018
Well. Tryed to register on the "Mantis" system at www.userspice.com/bugs
Couldnt finish the register process on the plataform, the served mailed me a corrupt verification link to my email, even the mail has corrupt characters not being enconded correctly (Adding 2 pics).
![[Image: 2FzXYbp.png]](https://i.imgur.com/2FzXYbp.png)
![[Image: 2g5K3Yr.png]](https://i.imgur.com/2g5K3Yr.png)
Complex password are no being accepted - shoropio - 02-27-2018
I got the same result in http://www.userspice.com/bugs
Complex password are no being accepted - Brandin - 02-27-2018
We're aware it's broken-you can login no problem without the verification though.
Complex password are no being accepted - feriksson - 02-27-2018
Well, corrected the link from :
https://userspice.com/bugs/verify.php?id=19&confirm_hash=r8k1icLkfTE6t6=vwnncQsK5R310TU230RUxjUx14j3cVyPQgwNSbGJEjLjYUDaQuddG_7dth-MLY8YP5DP_T
to
https://userspice.com/bugs/verify.php?id=19&confirm_hash=r8k1icLkfTE6t6vwnncQsK5R310TU230RUxjUx14j3cVyPQgwNSbGJEjLjYUDaQuddG_7dth-MLY8YP5DP_T
and seems it worked.
The verification it's needed, couse the system lest you set your password just inside the activation link, so you cant access before activation.
Thx for the time !
Complex password are no being accepted - Brandin - 02-28-2018
Thanks @feriksson.
@mudmin - can you see about correcting that link? It's adding an equal side in the middle of it.