Shattered Kingdoms
https://shatteredkingdoms.org/forums/

Password Bug
https://shatteredkingdoms.org/forums/viewtopic.php?f=26&t=11433
Page 1 of 1

Author:  sleeper [ Fri Jul 01, 2005 7:15 am ]
Post subject:  Password Bug

Quote:
Name: roltaine
Password: ************,*


:o

(Yes, that last character in my password is part of the password.)

Note: Password length not exact.

sleeper

Author:  Viltrax [ Sat Jul 02, 2005 12:26 pm ]
Post subject: 

Sounds like you might be a bit too creative in your password content. Make sure you don't choose characters that have special meaning for either your MUD client or the telnet protocol in general.

If your profile is truly inaccessible, send Dulrik an email from the account that you specified when creating the character (and no other), and he can reset the password.

Nobody involved in the administration of Shattered Kingdoms will ever ask you for your password, nor can they obtain your existing password. Do not give it out. That goes for both your characters in the game and the forums.

Author:  sleeper [ Tue Jul 05, 2005 7:38 am ]
Post subject: 

My profile is fine. My client at the time was putty. I do not believe "," is a special character within putty, and the last character of my password (the one that followed the comma) was still needed for the password to be complete. Its not that my password was creative, its just that it accepted it with the comma. Bug or no?

sleeper

Author:  Viltrax [ Tue Jul 05, 2005 2:36 pm ]
Post subject: 

I'm confused.

If you want to use punctuation, that's fine - I just tested putting a comma in the password of a test character and both the password-change worked, as did logging in with the new password.

Is the bug that the comma is displayed during data entry, instead of an asterisk?

Author:  sleeper [ Wed Jul 06, 2005 1:00 pm ]
Post subject: 

Errrr.... sry for the confusion.

I use putty. If you wish, dl it, set it up, and log in. If you set it to force local echo, it displays your password. I replaced the password with "*"s so as no to have my account hacked/deleted.

When I was typing in my password, I accidentally hit the comma, before the last character of my password and hit enter. I still managed to log in.

Just for further clarification, lets assume my password is sleeperrules. So it would look like this.

Code:
Name: roltaine
Password: sleeperrule,s


... And wallah... I'm logged on even though I shouldn't be.

sleeper

PS: I just tested it again. Turns out that these two situations (seen below) are the only way it works. Insert a comma anywhere else, the password fails.

Code:
Name: roltaine
Password: sleeperrule,s

...and...

Name:roltaine
Password: sleeperrules,

Author:  Goldlantern [ Wed Jul 06, 2005 1:44 pm ]
Post subject: 

A random letter will also occasionally work, aside from the comma.

Author:  baldwama [ Wed Jul 06, 2005 3:36 pm ]
Post subject: 

It sounds like there may be a set limit on the length of the password and anything entered after that limit is simply ignored.

Author:  sleeper [ Thu Jul 07, 2005 7:21 am ]
Post subject: 

baldwama wrote:
It sounds like there may be a set limit on the length of the password and anything entered after that limit is simply ignored.


Yep, I just tested this. Changed the last letter of the password to something else and I still managed to log in.

sleeper

Author:  baldwama [ Thu Jul 07, 2005 8:06 am ]
Post subject: 

I'm not just a nerd, I'm a techie nerd. 8)

Page 1 of 1 All times are UTC - 8 hours
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/