I found a bug with special characters in the password?

[cridus]

I wasn't sure where to create this thread...

 

Basically, for heliohost.org I've set a randomly-typed very complicated password with several special characters in it. Now that I can log in there, when I input it the site tells me "invalid login". I've tried by both copy-pasting it and re-writing it manually, so I am sure it's not me making a mistake.

 

The most particular special characters contained in my password are: < & % ( / ? ^ :

 

It already happened to me in the past that a site had a problem with certain special characters in the password (it was with "<" and ">", in that case), so I thought it was worth telling you guys.

 

I'm gonna change my password, in the meantime.

 

 

Edit: I changed my password to one with less and "simpler" special characters and now it works.

Edited April 1, 2018 by cridus

[wolstech]

Actually, the issue we see with complex passwords is usually to do with their length, not having symbols. How long was the password?

 

Our system cannot accept passwords over 18 characters.

[cridus]

Odd, it was 26 characters long, but the one I'm using now is of the same length and it worked.

[wolstech]

cPanel itself is what institutes the 18 character limit, not us, so I'm surprised it works. It's possible they've removed the limitation though considering the docs I'm looking at are from 2015.

 

Were you signing in on https://heliohost.org/login/, or at https://johnny.heliohost.org:2083/? The first method tends to act weird at times with Johnny accounts since it relies on the server verifying the password. If the server is overloaded and timed out verifying your credentials, it will say the password is incorrect even when it's not. The second tends to be more reliable for many.

[cridus]

It was https://heliohost.org/login/.

[awal1]

Hello,

It seems that some characters are not permitted in passwords!

I just tried to reset my password twice, with a password full of special characters via https://www.heliohost.org/reset/.
First the page says, password successfully reset. but then, I cannot log in. Until I chose a password with fewer and "simpler" symbols.
Now I can log in normally.

If this really is a known limitation, it would be helpful to display a notifications telling which symbols / special characters are not permitted.

[wolstech]

This is a known limitation. I believe it's quote marks and spaces that are the major issues, though I wouldn't be surprised if others cause problems as well.