Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

Forms authentiction - user authenticated when they add a space to the end of their password

$
0
0

Hi,

I have a website locally that uses Forms Authentication and when I attempt to login and add a space to the start or end of the password I am not authenticated as I would expect. However the same code deployed to a server authenticates me if I add a space to the start or end of the password and I would not expect this to happen.

As it's the same code on both platforms I'm assuming there is an environment difference. I've checked IIS settings and can see nothing obvious and as far as I can tell there is nothing in the config files that are significantly different and that I think would cause this.

Has anyone encountered this before? If so, what fixed it?

Note that the authentication code is black box so I'm unable to change this and add .Trim() to the authentication method.

Thanks in advance,

Mark


Viewing all articles
Browse latest Browse all 4737

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>