View Issue Details

This bug affects 1 person(s).
IDProjectCategoryView StatusLast Update
15061Bug reportsInstallationpublic2021-05-10 10:19
Reporterrjpinto Assigned Toc_schmitz  
Status acknowledgedResolutionopen 
Product Version3.17.x 
Summary15061: complex password failed to work
DescriptionUsage of complex passwords for the database connection with special caracteres always fails.

If the database user has a complex passwrd like >:8n@u;x8;|~ , the authentication will always fail.
Steps To ReproduceCreate a database and user for limesurvey to use:
CREATE ROLE limesurvey WITH PASSWORD '>:8n@u;x8;|~' LOGIN
CREATE DATABASE limesurvey WITH OWNER limesurvey

When you go through the web installation process it will always fail to authenticate. Changing the password to something more simple works with an ALTER ROLE will solve it. So I would guess there is a character in the password that is messing up the connection string.
TagsNo tags attached.
Bug heat4
Complete LimeSurvey version number (& build)3.17.7-190627
I will donate to the project if issue is resolvedNo
Database type & versionPostgresql 10
Server OS (if known)Ubuntu 18.04 LTS
Webserver software & version (if known)Apache
PHP Version7.2

Users monitoring this issue

User List There are no users monitoring this issue.




2021-03-10 22:57

administrator   ~63229

Please update to the latest version and check if the bug can still be reproduced. Thank you.


2021-05-10 10:19

administrator   ~64309

I don't see a quick way to resolve this.
The semicolon is breaking it but there is no proper way to quote the related value in the connection string.
We could forbid certain characters in the connection string, like semicolons and quotes.

Issue History

Date Modified Username Field Change
2019-07-19 16:59 rjpinto New Issue
2021-03-10 22:57 ollehar Status new => feedback
2021-03-10 22:57 ollehar Note Added: 63229
2021-05-10 10:19 c_schmitz Assigned To => c_schmitz
2021-05-10 10:19 c_schmitz Status feedback => acknowledged
2021-05-10 10:19 c_schmitz Note Added: 64309