| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 19954 | Bug reports | Authentication | public | 2025-02-06 07:28 | 2025-02-06 15:41 |
| Reporter | fradeff | Assigned To | c_schmitz | ||
| Priority | none | Severity | block | ||
| Status | closed | Resolution | duplicate | ||
| Product Version | 6.6.x | ||||
| Summary | 19954: false/confusing message for user about password length for password reset | ||||
| Description | There's a bug in the automatic login mail forwarding procedure for people who have an account /index.php/admin/authentication/sa/forgotpassword When following the link sent by email and choosing a new password, the message displayed is not consistent: “At least 8 characters long, 1 UpperCase, 1 Number”. But: 1A2345678 fail In fact, at least 12 characters are required: 1A23456789101112 works Which makes sense, as this is what is defined on | ||||
| Steps To Reproduce | Steps to reproduceask for a reset password, follow the link sent by email Expected resulttry a password with 8 digits, uppercase and number displays "At least 12 chars. long" Actual resulttry a password with 8 digits, uppercase and number displays "At least 8 chars. long" | ||||
| Tags | No tags attached. | ||||
| Bug heat | 2 | ||||
| Complete LimeSurvey version number (& build) | LimeSurvey Community Edition Version 6.10.1+250120 | ||||
| I will donate to the project if issue is resolved | No | ||||
| Browser | ff 134.0.2 | ||||
| Database type & version | mysqlnd 7.4.33 | ||||
| Server OS (if known) | Debian GNU/Linux 12 (bookworm) | ||||
| Webserver software & version (if known) | Apache 2.0 | ||||
| PHP Version | PHP Version 7.4.33 fpm | ||||
- Anonymous
