Project

General

Profile

Actions

Bug #22328

closed

wrong md5-hash of md5.js, frontend-, backend-login

Added by Sebastian about 14 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
Start date:
2010-03-25
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
4.3
PHP Version:
4.3
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

The md5-calculation produces wrong, it belongs to the used characters.

Following characters produces this failure:
äöüÄÖܧáÁ and many more.
These characters are not forbidden.

The md5.js is also used to send the backend-password.

Due the failure of md5.js it could be easier to descend the password-algorythm.

Following characters are availible:
01234567890123456789012345678901!\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ [\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
All other characters produces a wrong hash.

As fe-users want to change their password, I've noticed this problem in affinity with Issue #0012206.

It's not possible to replace the md5.js simple.
All hashed passwords are written in the wrong md5-code, that means, all users have to retype their password on login or have to receive automatically a new password...

See:
http://www.typo3.net/index.php?id=13&action=list_post&tid=70355&page=2%29
language: german, the problem occurs on usernames with specialchars/umlauts.

Attached is the old md5.js and a new one with no failure.
(issue imported from #M13917)


Files

md5.zip (4.97 KB) md5.zip Administrator Admin, 2010-03-25 18:36

Related issues 4 (0 open4 closed)

Related to TYPO3 Core - Bug #22187: rsaauth doesn't work with special characters (like ä ü ö § ) in passwordClosedChristian Kuhn2010-02-25

Actions
Related to TYPO3 Core - Bug #14256: special characters in username not checkedClosedSteffen Gebert2004-07-28

Actions
Related to TYPO3 Core - Task #30799: Make sure md5.js is allowed to be shipped with TYPO3ClosedXavier Perseguers2011-10-11

Actions
Is duplicate of TYPO3 Core - Bug #17422: FE-login doesn't workClosed2007-06-28

Actions
Actions

Also available in: Atom PDF