alloc icon indicating copy to clipboard operation
alloc copied to clipboard

Don't allow users to set passwords that are invalid for login

Open mattcen opened this issue 3 years ago • 0 comments

The below code:

https://github.com/cyberitsolutions/alloc/blob/05539b5794e38b212c4b808438fbdbc58783fde8/person/templates/personM.tpl#L39-L43

Allows a user to set a password longer than 32 characters.

But the below code:

https://github.com/cyberitsolutions/alloc/blob/05539b5794e38b212c4b808438fbdbc58783fde8/login/templates/login.tpl#L18

Requires the password on the login form to be a max of 32 characters.

I have tested (accidentally) that I can set a 36-character password successfully, but then fail to log in with it due to the char limit of the HTML field.

mattcen avatar Jul 15 '22 12:07 mattcen