SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0002562: Special Character in Password Change - MantisBT

Endian Issue Tracker

Please see now our new Bugtracker system: JIRA

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

ID

Project

Category

View Status

Date Submitted

Last Update

0002562

Endian Firewall

Input Validation

public

2009-12-17 21:46

2010-09-21 19:08

Reporter

ben-endian

Assigned To

Priority

normal

Severity

feature

Reproducibility

always

Status

confirmed

Resolution

open

Platform

OS

OS Version

Product Version

2.3

Target Version

future

Fixed in Version

Summary

0002562: Special Character in Password Change

Description

You cannot use an apostrophe in any password (Web,SSH,Dial) I am guessing due to the misinterpretation of it by the server-side scripts. Need to be aware of all special characters and account for them in the password change dialog page. Note the passwords are accepted if entered from the commmand line tools (passwd/htpasswd) but the web interface does not accept any passwords with apostrophe in it.

Tags

No tags attached.

Relationships

has duplicate

closed

Endian Firewall

admin password set

Notes
(0003580) ben-endian (reporter) 2009-12-17 22:12	The problem from what I can tell is that there are 2 things missing from the /etc/ppp/peers/<uplink> config file: (1) There is no device listed no matter what is selected (Serial or USB -- /dev/tty.<xxx>) and looking at the setttings file in /var/efw/uplinks/<uplink> there is no "COMPORT=/dev/tty.<xxx>" and even if you manually add the line it doesn't get processed by the uplinksdaemon when it autogenerates the peers file (2) The peers config file is also missing the reference to the chat script. It should have a line that is similar to following: connect "/usr/sbin/chat -f -v /etc/ppp/chat-<uplink>"

Issue History
Date Modified	Username	Field	Change
2009-12-17 21:46	ben-endian	New Issue
2009-12-17 22:12	ben-endian	Note Added: 0003580
2010-02-04 10:12	peter-endian	Relationship added	duplicate of 0002653
2010-02-04 10:12	peter-endian	Status	new => confirmed
2010-02-04 10:15	peter-endian	Target Version	=> future
2010-06-09 11:37	peter-endian	Relationship added	has duplicate 0002966
2010-09-21 19:08	peter-endian	Category	GUI => Input Validation

Copyright © 2005-2008 Endian, SRL. All rights reserved.

Copyright © 2000 - 2012 MantisBT Group