Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

unable to login on addons page


x0backslash0x

Recommended Posts

You are right Harald, it was the special characters.

 

Once the password was changed to leave out the special characters, I could use this account to login on the addons page.

 

Still, I feel a bit naked now without special characters.

 

But why does the addons page login not accept special characters in the password as the forum does? (out of sync password policies perhaps)

Link to comment
Share on other sites

Hi Paddy..

 

But why does the addons page login not accept special characters in the password as the forum does? (out of sync password policies perhaps)

 

I don't know - can you post an example password (with special characters) to test out?

 

Thanks,

:heart:, osCommerce

Link to comment
Share on other sites

  • 2 weeks later...

sorry for the late reply, I kind of lost track of this topic.

 

Anyway, here is a list of passwords that I tested with the results written in parenthesis

  • justsomerandompass (works)
  • justs0mer4n0domp4ss (works)
  • justsomer_andom-pass (works)
  • justs0mer_4nd0m-p4ss (works)
  • jusTs0meR_4nD0m-p4ss (works)
  • jusTs0méR_4nD0m-p4ss (failed)
  • jusTs0meR_4nD0m-pàss (failed)
  • jusT&s0meR_4nD0m-p4ss (failed)
  • jusTs(0meR_4nD0m-p4ss (failed)
  • jusTs'0meR_4nD0m-p4ss (failed)
  • jusTs=0meR_4nD0m-p4ss (works)
  • jusTs+0meR_4nD0m-p4ss (works)
  • jusTs*0meR_4nD0m-p4ss (works)
  • jusTs/0meR_4nD0m-p4ss (works)
  • jusTs\0meR_4nD0m-p4ss (failed)
  • jusTs.0meR_4nD0m-p4ss (works)
  • jusTs<0meR_4nD0m-p4ss (failed)
  • jusTs>0meR_4nD0m-p4ss (failed)

so to summarize, the following special characters seem to be valid:

  • _ (underscore)
  • - (hyphen)
  • = (equal sign)
  • + (plus sign)
  • / (forward slash)
  • . (period or dot)

From looking at the failed results, any other special character not in the above list seems to break

the password when used to login on the addon page.

 

My first guess would be that the valid characters are made up off exclusively math operators, though I am not sure about the underscore. Also both parenthesis are missing from that list to complete the set.

 

Another guess might be that only the typographic characters contained in the basic ASCII set are valid, but

parenthesis and the ampersand being invalid contradict this theory.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...