Locked out of account because of password bug

  • I changed the password on my main account, and when I tried to log back in, I was told that my password was incorrect.

    By creating other accounts and experimenting with several different passwords, I was able to determine that any passwords with single or double quotes are not correctly processed by WordPress.

    I have used passwords with single and double quotes with earlier versions of WordPress, and they have all worked fine. The bug that’s causing passwords with quotes to not be processed correctly must have been introduced in one of the more recent versions of WordPress.

    I have tried every way I can think of to escape the single and double quotes in my password, and nothing works.

    Does anyone know what’s causing this bug?

    Does anyone know what I should try entering on the login page in order to get access to my account?

    For example, if I changed my password to

    ziSmae'B1-*=u$X"!1Sg

    what would this actually end up being stored as, and what would I have to enter on the login page so it would accept it?

Viewing 2 replies - 1 through 2 (of 2 total)

  • Sculd1973

    I just tested out by creating new users with both quotes and double quotes in the password, worked both times in default WordPress. Maybe some plugin might be causing the trouble, can you list the names of plugins you’re using so that we can try to find the cause?

    Thread Starter Sculd1973

    (@sculd1973)

    This is a WordPress.com account.

    I’ve contacted WordPress.com support, but they keep telling me that this bug doesn’t exist.

    But I know that it does exist, because I’ve created numerous WordPress.com accounts, and I’ve reproduced this bug each and every time.

    Could someone please independently verify this bug for me?

    All you have to do is the following:

    1. Create a WordPress.com account, starting out with a password that doesn’t include quotes. (Creating an account with a password with quotes doesn’t cause any problems.)

    2. Log out and log back in.

    3. Go to wordpress.com/me and then to wordpress.com/me/security and change the password to one that does include single and/or double quotes.

    4. Log out. When you try to log back in with the new password, you’ll be told that it’s incorrect.

    Thank you to anyone who spends a couple of minutes verifying this for me.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Locked out of account because of password bug’ is closed to new replies.

Tags