Cannot log in using password with apostrophe

Bug Reports
1

Hi,

It seems that when there is a password with quotes like an apostrophe ‘ HivePress doesn’t accept it as a valid password for logging in/deleting your account. Passwords like these work for default WordPress login but do not work with HivePress. When trying to change the password in the Settings area, it says the current password (with apostrophe) is incorrect. Users cannot delete their accounts either as this also shows the incorrect password error.

If the character (apostrophe in this case) is escaped with a slash, like \\’ it is accepted. I am not a developer so I am not able to provide all places that this effects (I think you can set the password in Register regularly with ’ but it won’t be accepted later by HivePress). Please look at this and remedy with priority.

Thank you.

Steps to reproduce

Set a password with quotes, such as an apostrophe.

Actual result

HivePress reports incorrect password. Works for default WordPress login.

Expected result

Able to log in successfully or delete your account.

3

Thanks for reporting the issue. We’ve confirmed it and it will be fixed in the next HivePress update.

The issue occurs because this field value passes through the same cleanup function as other field values, which removes or escapes quotation marks for security.

1 Like
4

Hi @ihor

Thank you! Appreciate the explanation. I assume the fix will apply to all password fields that appear in HivePress?

Thank you.