ClearOS Bug Tracker


View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0000563ClearOSclearos-frameworkpublic2012-04-26 17:502016-06-02 10:47
Reporterdloper 
Assigned Tobchambers 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target Version6.8.0 Beta 1Fixed in Version6.8.0 Beta 1 
Summary0000563: Ampersand (&) character is not recognized by webconfig.
DescriptionWhen using an '&' character for passwords, Webconfig will not pass it on its password change nor will it recognize it when it is passed via authentication.
TagsNo tags attached.
Attached Files

- Relationships
has duplicate 0006261closed Codeigniter's global_xss_filtering can break Registration 
has duplicate 0002131closeduser2 Webconfig does not properly escape % in password fields 
related to 0006271closedbchambers Ampersand (&) character is not recognized by webconfig. 

-  Notes
(0001741)
dloper (administrator)
2015-08-10 10:16

This holds true if the Characters following the ampersand match an ascii character (ie. two numbers in hexidecimal)
(0002161)
user2
2015-11-17 10:22

From duplicate 0006261 :

If user's password contains an ampersand, CI is adding a semi colon to end of the password post as per this bug:

https://github.com/bcit-ci/CodeIgniter/issues/1674 [^] [^]

Disabling global_xss_filtering or upgrading CI framework seems to be the only workaround.
(0002171)
bchambers (administrator)
2015-11-17 10:45

It's a total hack, but this work around inside Registration app works:

$pw = $this->input->post('password');
if (preg_match('/&.*;$/', $pw))
        $pw = preg_replace('/;$/', '', $pw);
echo $this->registration->get_registration_info(
        $this->input->post('username'),
        $pw
);

- Issue History
Date Modified Username Field Change
2012-04-26 17:50 dloper New Issue
2012-04-27 19:05 user2 Status new => confirmed
2013-02-02 11:29 user2 Target Version => 6.4.0 Updates
2013-07-29 13:58 user2 Target Version 6.4.0 Updates => 6 Future
2014-04-22 13:28 user2 Target Version 6 Future => Future
2015-05-25 05:10 user2 Target Version Future =>
2015-08-10 10:16 dloper Note Added: 0001741
2015-11-17 10:20 user2 Relationship added has duplicate 0006261
2015-11-17 10:22 user2 Note Added: 0002161
2015-11-17 10:22 user2 Issue cloned: 0006271
2015-11-17 10:22 user2 Relationship added related to 0006271
2015-11-17 10:45 bchambers Note Added: 0002171
2015-11-17 12:31 user2 Assigned To => bchambers
2015-11-17 12:31 user2 Status confirmed => assigned
2015-11-18 11:33 user2 Category app-base - Base System => clearos-framework
2015-12-17 11:45 user2 Product Version 6.2.0 =>
2015-12-17 11:45 user2 Target Version => 6.7.0 Updates
2015-12-17 11:49 user2 Relationship added has duplicate 0002131
2016-02-16 21:26 user2 Status assigned => resolved
2016-02-16 21:26 user2 Fixed in Version => 6.8.0 Beta 1
2016-02-16 21:26 user2 Resolution open => fixed
2016-05-10 08:49 user2 Target Version 6.7.0 Updates => 6.8.0 Beta 1
2016-06-02 10:47 user2 Status resolved => closed