[#19204] - [4.0] Error in High Security Password of users Joomla
- Closed
- 6 Jun 2018
- Medium
- Build: 4.0-dev
- # 19204
Steps to reproduce the issue
Install Joomla using a user with a secure password like "Admin123456+"
Expected result
The user can enter into backend or frontend structure
Actual result
The user can't login
System information (as much as possible)
Joomla 4 Alpha 2
Additional comments
1- If I install Joomla with a password like "123", I can login without issues
2- If I after of login with a easy password change the password for "Admin123456+" then I can login without issues
| Labels |
Added:
?
|
||
| Title |
|
||||||
that was a example xD for explain it!. the structure of a password that isn't work is Mayus Letter(s)+Normal Letter(s)+ Number(s)+ Special Character(s)
This needs some investigation then. Can you narrow this to what chars break the password? (eg is it something from !@#$%^^&*_-+ )
Well i'm using a password in my website that works good with password like the example "Admin123456+" in the lastest version 3.8.3
Actually this needs do be debugged, I mean it can be js or the php filtering.
dolphin works like a charm for me : danielmiessler/SecLists#155 :D
| Category | ⇒ | Authentication JavaScript |
| Status | New | ⇒ | Discussion |
Please change Build to 4.0-dev
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/19204.
| Build | staging | ⇒ | 4.0-dev |
@Anu1601CS done.
I am able to re-product the same in the Joomla backend user manager as well where I use the password admin and it as strong and accepted.
brianteeman
- | Labels |
Added:
J4 Issue
|
||
Cannot replicate with password Admin123456+
| Status | Discussion | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2018-06-06 22:26:48 |
| Closed_By | ⇒ | Quy |
| Status | Fixed in Code Base | ⇒ | Closed |
| Closed_By | Quy | ⇒ | joomla-cms-bot |
Set to "closed" on behalf of @Quy by The JTracker Application at issues.joomla.org/joomla-cms/19204
Confirmed fix with #20414. Thanks.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/19204.
Admin123456is a secure password? TIL!!!