Password speclial signs problems only when reseting password

  • Resolved przembar

    (@przembar)


    4 years ago

    Hi,
    Changing password through edit-account/ works like charm.
    But problems appear when trying to reset password through lost-password/

    When using password reset mechanism through lost-password/ some signs make the password corrupted. When user enter i.e. phrase with any of those '\"< signs and hit enter the positive message appear. But when he try to login with new accepted password he will fail with rejection that password is incorrect.

    The same password works fine with standard changing password procedure in edit-account/.

    Tested on 4.19.0

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter przembar

    (@przembar)

    Additionally I can confirm that this problem shows when user register (add password) via the purchase/?plan=
    It is not possible then login to platform with password what was created with signs '\"<

    Toyin

    (@jnr4u2)

    Hi @przembar,

    Can you please send us your LifterLMS System Report?

    Use services like Imgur, Dropbox, or Pastebin to share screenshots, system reports, and logs. Remember that this is a public forum. If you don’t want your URLs, server paths, and other potentially sensitive information posted publicly and archived indefinitely you should blur or remove this information from your logs and screenshots before posting.

    Thank you ??

    Thread Starter przembar

    (@przembar)

    Hi @jnr4u2,
    I have even simpler path.
    I just reproduced this bug on official LifterLMS resource:
    https://academy.lifterlms.com
    1. Create user – normal password
    2. Log out
    3. Reset password through https://academy.lifterlms.com/my-courses/lost-password/
    4. When setting new password make sure that contains problematic signs '\"<
    5. Operation should be successful
    6. User cannot login with accepted password

    I created test user [email protected] – what currently have corrupted password.
    After test you can remove this user from platform.

    Cheers

    Natalie

    (@nrherron)

    Hi @przembar

    Thank you for the recreation steps!

    We have roped in our engineering team to have a look.

    We can update you once we know more information!

    Let us know if you have any questions in the meantime!

    Best,

    Toyin

    (@jnr4u2)

    Hi @przembar

    This is to notify you that the development team is working on a fix for this.

    You can also follow up here as well: https://github.com/gocodebox/lifterlms/issues/1567

    Thank you ??

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Password speclial signs problems only when reseting password’ is closed to new replies.