special character / symbols in passwords

Need help with the Administration of your Joomla! 5.x site? This is the spot for you.

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10
Post Reply
vanthien
Joomla! Apprentice
Joomla! Apprentice
Posts: 19
Joined: Tue Dec 19, 2023 5:55 pm

special character / symbols in passwords

Post by vanthien » Wed Feb 14, 2024 10:54 pm

Password rejections have been a bit of a problem on my new website, where several individuals encountered problems with registering. Searching the forums I've found some discussion, but no answers. The topics are locked, so I'm posting this separately.

The password requirements on my site are:
12 or more characters,
including 2 each of lower case, upper case, numbers and symbols.

After some experimenting, trial and error, I believe I've come up with the reason for the annoying rejections.
As far as I can determine, acceptable symbols are:
! # $ % & * ( ) _ - + = : ; ?

NOT usable symbols:
@ ^ + ~ “ ‘ / \ | . > , < and spaces.

For what it's worth.
Frank :-)

User avatar
ceford
Joomla! Hero
Joomla! Hero
Posts: 2741
Joined: Mon Feb 24, 2014 10:38 pm
Location: Edinburgh, Scotland
Contact:

Re: special character / symbols in passwords

Post by ceford » Thu Feb 15, 2024 11:52 am

Reported as a bug in September 2023: https://issues.joomla.org/tracker/joomla-cms/41552

vanthien
Joomla! Apprentice
Joomla! Apprentice
Posts: 19
Joined: Tue Dec 19, 2023 5:55 pm

Re: special character / symbols in passwords

Post by vanthien » Fri Feb 16, 2024 12:20 am

If this was reported 5 months ago, how long can it take before it is included in an update?
I have just launched my website, giving registrants careful instructions which symbols to use and which not to use, and find that most registrants still run into trouble registering and I have to rescue them manually. Maybe they hit the Register button before verifying that their password was accepted, but they get an entry in the list of users, blocked and inactive, after which they can't do anything anymore until I am alerted to the entry and manually Activate them. It's a real nuisance and I'd love to see a fix for this.

MJO_SWUK
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Tue May 14, 2024 7:16 pm

Re: special character / symbols in passwords

Post by MJO_SWUK » Tue May 14, 2024 7:23 pm

I'm also having problems with this.
Existing passwords with "illegal" symbols still seem to work, but not for any new users.
Is it known where the "allowed" and "not allowed" special symbols are stored so that this can be manually updated pending a fix.
Is it in the DB or in code?

User avatar
ceford
Joomla! Hero
Joomla! Hero
Posts: 2741
Joined: Mon Feb 24, 2014 10:38 pm
Location: Edinburgh, Scotland
Contact:

Re: special character / symbols in passwords

Post by ceford » Tue May 14, 2024 7:37 pm

You should read the bug report. The location and a potential solution are there. The solution would have to go in the js, min.js and min.js.gz files.

User avatar
brian
Joomla! Master
Joomla! Master
Posts: 12804
Joined: Fri Aug 12, 2005 7:19 am
Location: Leeds, UK
Contact:

Re: special character / symbols in passwords

Post by brian » Fri May 17, 2024 11:29 pm

I have created a fix for this. It needs testing https://github.com/joomla/joomla-cms/pull/43484
"Exploited yesterday... Hacked tomorrow"
Blog http://brian.teeman.net/
Joomla Hidden Secrets http://hiddenjoomlasecrets.com/

User avatar
JAVesey
Joomla! Hero
Joomla! Hero
Posts: 2645
Joined: Tue May 14, 2013 1:21 pm
Location: Cardiff, Wales, UK
Contact:

Re: special character / symbols in passwords

Post by JAVesey » Sat May 18, 2024 10:18 am

brian wrote:
Fri May 17, 2024 11:29 pm
I have created a fix for this. It needs testing https://github.com/joomla/joomla-cms/pull/43484
@brian
Thank you for this.

@ceford
I see you’ve tested the file but I can’t find the passwordstrength.es6.js file in my installation (J5.1.0). Can you point me in the right direction, please :)
John V
Cardiff, Wales, UK
Joomla 5.1.0 "live" site on PHP 8.2.15 and MariaDB 10.11.7
Joomla 5.1.0 on XAMMP for MacOS with PHP 8.2.4 and MariaDB 10.4.28

User avatar
ceford
Joomla! Hero
Joomla! Hero
Posts: 2741
Joined: Mon Feb 24, 2014 10:38 pm
Location: Edinburgh, Scotland
Contact:

Re: special character / symbols in passwords

Post by ceford » Sat May 18, 2024 12:55 pm

I am using a clone of the repo - go to the GitHub site, https://github.com/joomla/joomla-cms, select the 5.1-dev branch and follow the instructions near the bottom of the page. You have to run npm ci to recompile the js files.


Post Reply

Return to “Administration Joomla! 5.x”