Password error using ￡ and $

  • Resolved rpclarke41

    (@rpclarke41)


    2 years ago

    There is an error with the processing of password on the login page. If the password contains ￡ or $ (there may be others I haven’t checked every combination) the login is rejected. If you login using wordpress admin it works correctly. This is using a UK keyboard.

    THe error crept in a few versions ago, I can’t be sure when. There must be some character transaltion or testing which is failing.

Viewing 9 replies - 1 through 9 (of 9 total)
  • missveronica

    (@missveronicatv)

    @rpclarke41

    I tried to register with UM and used a password with ￡ and $ and I can login without issues. On my Scandinavian Logitech keyboard I used ALTGR3 and ALTGR4 for ￡ and $.

    Plugin Support yuriinalivaiko

    (@yuriinalivaiko)

    Hello @rpclarke41

    I have tested the Password Reset form and the Login form with different passwords that contain ￡ or $. I don’t see the issue you reported.

    Maybe there is a third-party plugin that influences passwords. Try to do a conflict test to find this plugin. Follow instructions in the documentation to do a conflict test: https://docs.ultimatemember.com/article/96-how-to-do-a-plugin-theme-conflict-test

    Regards

    Thread Starter rpclarke41

    (@rpclarke41)

    I’ll do some further checking

    Thread Starter rpclarke41

    (@rpclarke41)

    I have disabled all plugins except Ultimate, no change.

    I changed theme to the 2023 base theme, no change.

    So I decided to check the characters at fault. I was wrong it is not ￡ or $ but ” the double quote.

    missveronica

    (@missveronicatv)

    @rpclarke41

    Yes you are right double quote will give wrong password.

    Solution use the backslash like this \" and the password will be accepted.

    Thread Starter rpclarke41

    (@rpclarke41)

    However if you are logging on through the wordpress panel this is allowed. There must be an issue with your code doing it differently?

    Thread Starter rpclarke41

    (@rpclarke41)

    Oh and something was changed becuase it used to work happily

    Plugin Support yuriinalivaiko

    (@yuriinalivaiko)

    Hi @rpclarke41

    WordPress adds slashes before quotes in input data. Our plugin uses the recommended function wp_unslash() to remove slashes from input data on registration and login. Other plugins used for registration may not do this. Do not use unescaped quotes in passwords to avoid this problem.

    Regards

    Plugin Support andrewshu

    (@andrewshu)

    Hi @rpclarke41

    This thread has been inactive for a while so we’re going to go ahead and mark it Resolved.

    Please feel free to re-open this thread if any other questions come up and we’d be happy to help. ??

    Regards

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Password error using ￡ and $’ is closed to new replies.

Tags