Main site password limitation discovered |
Post Reply |
Author | |
Iwan Ruby
Forum Newbie Joined: 30 Jul 2021 Location: Indonesia Status: Offline Points: 39 |
Post Options
Thanks(0)
Posted: 03 Aug 2021 at 1:35pm |
cheers.. for Adam
|
|
UMUR
MMA Special Collaborator Errors & Omissions Team / Retired Admin Joined: 25 Mar 2010 Location: Denmark Status: Offline Points: 18228 |
Post Options
Thanks(0)
|
Great detective work Adam
|
|
Bosh66
Forum Admin Group Sludge, MC, HC, Post-Metal & Noise Rock Joined: 14 Feb 2013 Location: Bolton, Lancs Status: Offline Points: 25510 |
Post Options
Thanks(0)
|
Yes, good spot. At least we know now.
|
|
Nightfly
Forum Admin Group Death, D/S/D, T/S/G Teams Joined: 07 Apr 2010 Location: UK Status: Offline Points: 5060 |
Post Options
Thanks(0)
|
Well done on discovering that Adam.
|
|
adg211288
Forum Admin Group Black Metal, Prog/AG Teams Joined: 05 Nov 2010 Location: United Kingdom Status: Offline Points: 22236 |
Post Options
Thanks(0)
|
Update: The forum actually is setting a maximum password length of 20 correctly, but it still permits the setting of longer passwords without alerting the user that the limit has been reached. But it only saves 20 characters. Trying to type more after 20 won't work, nor with copy/pasting in a longer password result in more than 20 characters. The main site on the other hand does not do this hence the Invalid Password error.
Edited by adg211288 - 02 Aug 2021 at 1:23pm |
|
adg211288
Forum Admin Group Black Metal, Prog/AG Teams Joined: 05 Nov 2010 Location: United Kingdom Status: Offline Points: 22236 |
Post Options
Thanks(0)
|
Over the years on MMA we've had a few users report that they can't log-in to the main MMA site even though the forum works fine.
It's been discovered today through some testing and the cooperation of a user affected by this problem, that the main site actually has a character count limitation on passwords set to 20. This limit does not exist on the forum, hence the problem. As far as I can tell, the bug originates in the forum software which is supposed to cap passwords (and usernames) at 20 characters, but is not. While this may not explain every single instance of log-in issues experienced by MMA users, some of which testing showed to be on the user end, it does explain some of them. It is advised therefore that all MMA passwords are kept to a maximum of 20 characters. Forum passwords longer than 20 characters can be shortened to log-in to the main site without changing them, however, my testing has found. I'd like to apologies for any inconvenience caused by this.
|
|
Post Reply | |
Tweet
|
Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |