PDA

View Full Version : AdminCP didn't recognize changed password


Snowhog
07-26-2013, 03:50 AM
vBulletin 4.2.1

I'm an administrator on our forum. I changed my password tonight (Settings > Edit Email & Password) and received confirmation that the change was accepted.

I tried to log in to the AdminCP with my new password, but it wasn't accepted. I verified three times that the password (new one) was being typed in correctly.

I changed my password back to what it was (Settings > Edit Email & Password) and tried the AdminCP again. Got in no problem.

My 'original' password is 15 characters long. The new password I created was 63 characters long.

Why would the AdminCP not recognize the 63 character password but the forum log in would? :confused:

I only wanted to increase the strength of my log in password for my account by making it more difficult to decrypt if my account were ever compromised.

Snowhog
07-28-2013, 09:19 PM
No one has any answers to this? Not even suggestions?

I'm not asking for means to log in to the AdminCP -- I already have permission to do so. As stated, I'm an Administrator on our forum. I just don't understand why logging in to the forum with the longer password is okay, but not in to the AdminCP.

Lynne
08-05-2013, 12:45 AM
If you look at the page source, you'll see the length of the password field is only 50, so I don't think you can set it to 64 characters unless you changed this - did you?

Snowhog
08-05-2013, 10:19 PM
Thank you for replying Lynne.

No, I didn't change the length of the password field.

So, while the password field in the UserCP (Settings > Edit Email & Password), which is 'large' and will accept more than a 50 character password, it must be truncating anything over 50 characters.

When logging in to the Forum, the password field is 'short', but pasted content gets accepted. So apparently there, it also must be truncating the input.

When logging in to the AdminCP, the password filed is 'large' and will accept way more than 50 characters. But there, it must not be truncating anything over 50 characters, thus the invalid password notification.

Have I got this correct?

Lynne
08-05-2013, 11:33 PM
It's hard to tell if pasted content gets 'accepted' since you can't actually see it - well, I can't tell the difference between •••••••• and password, so it's hard for me to tell if it's truncated or not. :) I didn't look into the code, but if the main site is limited to 50, then I doubt it is going to allow more somewhere else. Try changing it to a password that is only 49 characters and see if it works.