Custom Fields
Re-Envisioned
Support MB User Profile Login issue when " character is used in a password

This topic contains 1 reply, has 2 voices, and was last updated by  Anh Tran 1 week ago.

  • Creator
    Topic
  • #13186
    Resolved
    HerrMoier
    Participant

    I use the login form functionality of MB User Profile on a customer’s website. It took me quite a while to figure, but it seems that there is a problem when a " character is used in a password.

    The form then always returns the “incorrect password” error message. I first thought it’s a configuration issue but then at some point realized that it worked with another account with a different password.

    I assume that it might be related to some escaping that’s done with the input/password?

    How to reproduce:
    – Add a login form with mb_user_profile_login shortcode somewhere on the page.
    – Create a test user with a simple (read: “weak”) password like test123.
    – Try to login via the previously created login form.
    – Login should work as expected.
    – Change password of the test user to test123".
    – Try to login again.
    – Login results in a “wrong password” error.

Viewing 1 replies (of 1 total)
  • Author
    Replies
  • #13253

    Anh Tran
    Keymaster

    Hi HerrMoier,

    Thanks a lot for your feedback. I’ve just fixed the bug in version 1.1.4. Please update. (AIO package will be updated later).

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.