10474: Characters not accepted for "save & resume later" passwords in links sent by email

This bug affects 1 person(s).

ID	Project	Category	View Status	Date Submitted	Last Update

10474	Bug reports	Other	public	2016-02-16 10:25	2018-09-28 14:12

Reporter	minnoce	Assigned To	c_schmitz
Priority	normal	Severity	minor
Status	closed	Resolution	fixed
Product Version	2.06+
Fixed in Version	2.06+

Summary	10474: Characters not accepted for "save & resume later" passwords in links sent by email
Description	Using some characters for the "save and resume later" passwords (e.g. the slash: "/") are causing bad behaviour of Limesurvey when the user try to use the link sent by email. The password work correctly if entered on the Limesurvey web form.
Steps To Reproduce	1) Set a survey with the "save and resume later" option 2) Start the survey and use the "save and resume later" button 3) Select a password containing the "/" (slash) 4) Click on the link generated by Limesurvey and sent to you by email 5) Limesurvey don't work (I'm receiving 404 - Not found)
Tags	No tags attached.

Bug heat	6
Complete LimeSurvey version number (& build)	build160129
I will donate to the project if issue is resolved	No
Browser
Database type & version	MySQL 5.6
Server OS (if known)	Linux (CentOS 6)
Webserver software & version (if known)	Apache 2.2
PHP Version	5.6

User List	There are no users monitoring this issue.

c_schmitz 2016-04-04 12:34 administrator ~36974	Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=18280

c_schmitz 2016-04-04 12:35 administrator ~36975	Fix committed to 2.06lts branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=18281

minnoce 2016-04-06 09:36 reporter ~37021	The code in patched file "application/libraries/Save.php" is wrong. Some parentesis in lines 140-141 are in the wrong position. Here the lines corrected: if (strpos($_POST['savename'],'/')!==false \|\| strpos($_POST['savepass'],'/')!==false \|\| strpos($_POST['savename'],'&')!==false \|\| strpos($_POST['savepass'],'&')!==false \|\| strpos($_POST['savename'],'\')!==false \|\| strpos($_POST['savepass'],'\')!==false)

c_schmitz 2016-04-21 15:18 administrator ~37657	Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=18674

c_schmitz 2016-04-21 15:20 administrator ~37658	Fix committed to 2.06lts branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=18675

c_schmitz 2016-04-21 15:20 administrator ~37659	Thank you - good catch!

c_schmitz 2016-04-25 13:54 administrator ~37794	Version 2.50+ Build 160425 released

DenisChenu 2018-09-28 14:12 developer ~49180	Fix committed to 2.06lts branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=28074

LimeSurvey: master 3bfd9b68 2016-04-04 10:34:06 c_schmitz Details Diff	Fixed issue 10474: Some characters not accepted for "save & resume later" passwords in links sent by email	Affected Issues 10474
	mod - application/controllers/admin/dataentry.php	Diff File
	mod - application/helpers/frontend_helper.php	Diff File
	mod - application/libraries/Save.php	Diff File
LimeSurvey: 2.06lts a4a6a860 2016-04-04 10:35:07 c_schmitz Details Diff	Fixed issue 10474: Some characters not accepted for "save & resume later" passwords in links sent by email	Affected Issues 10474
	mod - application/controllers/admin/dataentry.php	Diff File
	mod - application/helpers/frontend_helper.php	Diff File
	mod - application/libraries/Save.php	Diff File
LimeSurvey: 2.06lts e79b997c 2016-04-04 12:35:07 c_schmitz Committer: DenisChenu Details Diff	Fixed issue 10474: Some characters not accepted for "save & resume later" passwords in links sent by email	Affected Issues 10474
	mod - application/controllers/admin/dataentry.php	Diff File
	mod - application/helpers/frontend_helper.php	Diff File
	mod - application/libraries/Save.php	Diff File
LimeSurvey: master e62037a6 2016-04-21 13:18:42 c_schmitz Details Diff	Fixed issue 10474: Characters not accepted for "save & resume later" passwords in links sent by email	Affected Issues 10474
	mod - application/libraries/Save.php	Diff File
LimeSurvey: 2.06lts e0d9b97e 2016-04-21 13:18:42 c_schmitz Details Diff	Fixed issue 10474: Characters not accepted for "save & resume later" passwords in links sent by email	Affected Issues 10474
	mod - application/libraries/Save.php	Diff File

Date Modified	Username	Field	Change
2016-02-16 10:25	minnoce	New Issue
2016-02-24 12:10	c_schmitz	Assigned To	=> c_schmitz
2016-02-24 12:10	c_schmitz	Status	new => assigned
2016-04-04 12:34	c_schmitz	Changeset attached	=> LimeSurvey master 3bfd9b68
2016-04-04 12:34	c_schmitz	Note Added: 36974
2016-04-04 12:34	c_schmitz	Resolution	open => fixed
2016-04-04 12:35	c_schmitz	Changeset attached	=> LimeSurvey 2.06lts a4a6a860
2016-04-04 12:35	c_schmitz	Note Added: 36975
2016-04-04 12:35	c_schmitz	Status	assigned => resolved
2016-04-04 12:35	c_schmitz	Fixed in Version	=> 2.06+
2016-04-06 09:36	minnoce	Note Added: 37021
2016-04-06 09:36	minnoce	Status	resolved => feedback
2016-04-06 09:36	minnoce	Resolution	fixed => reopened
2016-04-21 15:18	c_schmitz	Changeset attached	=> LimeSurvey master e62037a6
2016-04-21 15:18	c_schmitz	Note Added: 37657
2016-04-21 15:20	c_schmitz	Changeset attached	=> LimeSurvey 2.06lts e0d9b97e
2016-04-21 15:20	c_schmitz	Note Added: 37658
2016-04-21 15:20	c_schmitz	Note Added: 37659
2016-04-21 15:20	c_schmitz	Status	feedback => resolved
2016-04-21 15:20	c_schmitz	Resolution	reopened => fixed
2016-04-25 13:54	c_schmitz	Note Added: 37794
2016-04-25 13:54	c_schmitz	Status	resolved => closed
2018-09-28 14:12	DenisChenu	Changeset attached	=> LimeSurvey 2.06lts e79b997c
2018-09-28 14:12	DenisChenu	Note Added: 49180

View Issue Details

Users monitoring this issue

Activities

Related Changesets

Issue History