Index  | Recent Threads  | Unanswered Threads  | Who's Active  | Guidelines  | Search
 

Quick Go »
No member browsing this thread
Thread Status: Active
Total posts in this thread: 2
[ Jump to Last Post ]
Post new Thread
Author
Previous Thread This topic has been viewed 1699 times and has 1 reply Next Thread
NUCCpod_NAPTIMELABS_01
Cruncher
Joined: Nov 28, 2017
Post Count: 10
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Login password length field does not match max allowed password length

Hello fellow humans.

The listed password format requirements are
Password Format Requirements:
6 characters minimum
100 characters maximum
May use alphanumeric and "special" characters (!@#$%^&*_+=:;, etc...)
Common and very simple passwords are not allowed.

However, the max length of the password field in the form is set to 60.
Anyone who has a password longer than 60 characters can't use this login form without modifying the HTML on the client side before submitting the login request.


<input name="j_password" class="textboxSixteen" maxlength="60" size="20" type="password">


I discovered this when I was having difficulties logging in using a password manager that utilizes longer than "normal" passwords.

Thank you for your time.

*edit* I added the link to the offending login form, as there is another login portal elseware on the site.
----------------------------------------
[Edit 1 times, last edit by NUCCpod_NAPTIMELABS_01 at Dec 3, 2017 10:11:01 AM]
[Dec 3, 2017 8:43:20 AM]   Link   Report threatening or abusive post: please login first  Go to top 
SekeRob
Master Cruncher
Joined: Jan 7, 2013
Post Count: 2741
Status: Offline
Reply to this Post  Reply with Quote 
Re: Login password length field does not match max allowed password length

Funny, as in past, when the length allowed was like 16, you could enter longer than the permitted length into the form field... it would just scroll off to the left, invisibly to the user as it only shows as ******, and it then storing the last N characters typed, so you'd never get back in, lest you know if one had a longlong password set up.

Some programs have a button in form of an eye symbol to show passwords in plain text, for as long as holding the button, to inspect what one typed, in case of access problems.

Standard BOINC projects allow recovery by logging in with the 32 hex authenticator key that can be found in the BOINC data dir account file, but regrettably, not at WCG.
----------------------------------------
[Edit 1 times, last edit by SekeRob* at Dec 3, 2017 9:53:33 AM]
[Dec 3, 2017 9:51:20 AM]   Link   Report threatening or abusive post: please login first  Go to top 
[ Jump to Last Post ]
Post new Thread