Forums
First  << 1 >>  Last
Forum Main>>Bugs & Issues>> Invalid password issue
JMorgan
ID: 1612472
Level: 20
Posts: 145
Score: 38
JMorgan [1612472]Reply | Quote | Report

Thread created on Tue Jul 03, 2012 14:26:42
Last replied to on Wed Oct 24, 2012 06:38:52
I bought the City Watch feature recently and downloaded the application. When I try to log in with correct information, I get the error: Username or password incorrect.

I suspected that the City Watch client can't correctly process the single quote char (') in the password, so I tried to change my password in the web client. Then I got this error message:

Old password (********) invalid

Error. Password reset failed. This is most likely because the old password you entered was incorrect, but could have another cause - please email george@torn.com for help.

(NB: the old password was shown in plain text on screen... Please don't display plain passwords.)

The single quote char in the old password was escaped, so it's probably causing the problem. I assume that the password policy was changed after I initially set my password, so now my password seems to be invalid. Logging into web client still works fine, but I can't change the password, and the City Watch client doesn't work.

Changing the password shouldn't fail because the *old* password is invalid, and passwords should allow special chars like single quote.

I send a mail to george@torn.com as requested, but they asked me to open a bug report here.


Super secret reinforced spam barrier 2.0
Marc

ID: 24377
Level: 64
Posts: 5553
Score: 3442
JUXMarc [24377]Reply | Quote | Report

Posted on Tue Jul 03, 2012 15:33:20
Confirming for Davzz

Super secret reinforced spam barrier 2.0
Davzz

ID: 323969
Level: 17
Posts: 746
Score: 400
Davzz [323969]Reply | Quote | Report

Posted on Thu Sep 20, 2012 00:53:52
Hey,

I'm not able to replicate this. If I put a junk old password in, it says "Your old password was incorrect.". It does not print either of the passwords out to the console (I agree, this is bad). If you can still see this, can you paste in here the URL and the exact values you put in?

I have prevented anyone from creating a new password with quotes in it. Please follow the password reset process (linked from the login page) to reset your password to something without a quote in it.

Thanks!

-Alex

-Davz
Super secret reinforced spam barrier 2.0
TedBundy

ID: 1681118
Level: 38
Posts: 209
Score: -191
TedBundy [1681118]Reply | Quote | Report

Posted on Wed Oct 24, 2012 06:38:52
i forgot the password to my acccount and i am trying to resend the password to the acccount i use to have, when i tried creating a new account with the same email it said it was in use but now when i try sending the password this message comes up:


That email address was not found in our database or there was a problem sending the email with a link in it. Please contact george@torn.com or contact a staff member on IRC


PLEASE HELP DO NOT WANNA START ALL OVER

Forum Main>>Bugs & Issues>> Invalid password issue
First  << 1 >>  Last