Post subject: Password length lets me login on forums but not main site.
qiskudufo
He/Him
Joined: 6/24/2018
Posts: 3
Hello, fellas: I registered an account on the forums earlier, and found I could not login to the main tasvideos site. To my surprise, I also found the main site only lets me enter a password up to a certain length, meaning I could login with my old account on the forums, but not the main site. Since this new account has a shorter password, I can login on both the main site and the forums. I thought you'd like to know I found it odd to have this behaviour, since I expected there to not be a limit on passwords with the main site, seeing as there isn't a limit with the forums, as far as I can tell.
Emulator Coder
Joined: 3/9/2004
Posts: 4588
Location: In his lab studying psychology to find new ways to torture TASers and forumers
How long is this password?
Warning: Opinions expressed by Nach or others in this post do not necessarily reflect the views, opinions, or position of Nach himself on the matter(s) being discussed therein.
Joined: 5/23/2014
Posts: 162
Perhaps something that should be DM'ed for account safety reasons?
qiskudufo
He/Him
Joined: 6/24/2018
Posts: 3
Nach wrote:
How long is this password?
Nice try ;) Seriously though, it's 40 digits.
Emulator Coder
Joined: 3/9/2004
Posts: 4588
Location: In his lab studying psychology to find new ways to torture TASers and forumers
qiskudufo wrote:
Nach wrote:
How long is this password?
Nice try ;)
Not sure what you think is being attempted.
qiskudufo wrote:
Seriously though, it's 40 digits.
Okay, I'll see if we have any limitations below 40.
Warning: Opinions expressed by Nach or others in this post do not necessarily reflect the views, opinions, or position of Nach himself on the matter(s) being discussed therein.
Sand
He/Him
Player (143)
Joined: 6/26/2018
Posts: 175
I also currently can log in to the forums at https://direct.tasvideos.org/forum/login.php, but not the main site at https://direct.tasvideos.org/Login.html. I am not sure if it has something to do with my password length (64 characters), the fact that I'm using https, or something else. I have been able to log in to the main site in the past; as recently as 2019-10-11 I was able to edit a wiki page. (I don't remember if I was using http or https then.) https://direct.tasvideos.org/diff.exe?page=GameResources%2FDOS%2FCaptainComic&rev=5
Sand
He/Him
Player (143)
Joined: 6/26/2018
Posts: 175
Sand wrote:
I also currently can log in to the forums at https://direct.tasvideos.org/forum/login.php, but not the main site at https://direct.tasvideos.org/Login.html. I am not sure if it has something to do with my password length (64 characters), the fact that I'm using https, or something else. I have been able to log in to the main site in the past; as recently as 2019-10-11 I was able to edit a wiki page. (I don't remember if I was using http or https then.) https://direct.tasvideos.org/diff.exe?page=GameResources%2FDOS%2FCaptainComic&rev=5
I figured out the problem. It's that the forum's password fields have a maximum input length of 32, while the main site does not have a limit.
<input type="password" class="post" name="password" size="25" maxlength="32">
<input type="password" name="pass">
When I last changed my password on the forum, I thought I was pasting in 64 characters, but the password input only accepted the first 32. The forum login page similarly took only the first 32 characters, so pasting my 64-character password worked to log in on the form. But the main site login page was taking all 64 characters, which didn't match the 32-byte password known by the forum. I've shortened my password to 32 characters so I won't have this problem any more.
Lobsterzelda
He/Him
Skilled player (1258)
Joined: 3/17/2019
Posts: 282
Sand wrote:
When I last changed my password on the forum, I thought I was pasting in 64 characters, but the password input only accepted the first 32. The forum login page similarly took only the first 32 characters, so pasting my 64-character password worked to log in on the form. But the main site login page was taking all 64 characters, which didn't match the 32-byte password known by the forum. I've shortened my password to 32 characters so I won't have this problem any more.
Dude... don't take this the wrong way, but, what could possibly be in your TASVideos account that's so confidential that you need a 64 character password to secure it? Lol!
Editor, Active player (297)
Joined: 3/8/2004
Posts: 7469
Location: Arzareth
Lobsterzelda wrote:
Dude... don't take this the wrong way, but, what could possibly be in your TASVideos account that's so confidential that you need a 64 character password to secure it? Lol!
Long passwords can be easier to remember while simultaneously being much, much harder to break. https://xkcd.com/936/
Amaraticando
It/Its
Editor, Player (159)
Joined: 1/10/2012
Posts: 673
Location: Brazil
When a website does tot accept long passwords, they give me the sensation that they are storing it in plain text in the database, which is unacceptable even for non critical services. I'm sure TASVideos doesn't do it, though.