[BlueOnyx:23893] Re: some characters cannot be used in the password

Michael Stauber mstauber at blueonyx.it
Sat May 23 13:44:18 -05 2020


Hi Tomohiro Hosaka:

> Even though I entered the correct password in /base/link, it was
> displayed as wrong.
> 
> If there are restrictions, I'm happy if an error occurs during
> registration.


Yeah, we had to prohibit usage of certain characters in passwords. This
is the relevant code for it:

https://devel.blueonyx.it/trac/changeset/2504

<!-- Please note the password regexp. It forbids certain elements from
the *octal* ASCII table.

     Forbidden:
     ==========
     Anything between octal 001 and 040 control chars and space
     Octal \042, which means: "
     Octal \046, which means: &
     Octal \047, which means: '
     Octal \057, which means: /
     Octal \074, which means: <
     Octal \076, which means: >
     Octal \077, which means: ?
     Octal \100, which means: @
     Octal \133-\140, which means: [ \ ] ^ _ `
     Octal \173-\177, which means: { | } ~ and DELete key.
     See:
https://web.archive.org/web/20120710040006/https://courses.engr.illinois.edu/ece390/books/labmanual/ascii-code-table.html

     Still allowed chars:
     ====================
     Any alphanumeric character plus: !#$%()*+,-.:;=
-->

> These are the passwords that could not be used.

> tESB6jehyN.|  <-- Forbidden character: |
> BZy5Vep8_fr1  <-- Forbidden character: _

I marked the forbidden characters in the quote above.

> BZy5-!p8#frV

That one should actually work for the BlueOnyx GUI. In fact I just
created a user with that same password and was able to login to the GUI
afterwards.

But I see you mentioned /base/link and that's another issue. I think the
Magento shop has it's own limitations about what characters it accepts
for shopping account passwords and it might have choked on any of the
special characters in the password above. The '-' is probably fine, but
the '#' might be forbidden in Magento shop passwords. Not sure.

-- 
With best regards

Michael Stauber



More information about the Blueonyx mailing list