I changed my password and now I can login with my new password and with my old password too.
Not much "secure".

Written by Dark Horizons on 04.10.2020 at 10:41

I changed my password and now I can login with my new password and with my old password too.
Not much "secure".

That doesn't sound right. Have you cleared your cache and then tried logging in with your old password after?

Written by Troy Killjoy on 04.10.2020 at 10:59

Written by Dark Horizons on 04.10.2020 at 10:41

I changed my password and now I can login with my new password and with my old password too.
Not much "secure".

That doesn't sound right. Have you cleared your cache and then tried logging in with your old password after?

Yes, 2 different passwords working even after cleaning cache!

Written by Dark Horizons on 04.10.2020 at 18:39

Yes, 2 different passwords working even after cleaning cache!

Interesting. I'll message someone who's more technology inclined and direct them to this thread in hopes of solving this.

Written by Troy Killjoy on 04.10.2020 at 18:48

Written by Dark Horizons on 04.10.2020 at 18:39

Yes, 2 different passwords working even after cleaning cache!

Interesting. I'll message someone who's more technology inclined and direct them to this thread in hopes of solving this.

Thank you Troy!

Written by Dark Horizons on 04.10.2020 at 18:50

Thank you Troy!

No problem. You'll know as soon as I do whether this can be fixed or not.

Written by Dark Horizons on 04.10.2020 at 10:41

I changed my password and now I can login with my new password and with my old password too.
Not much "secure".

Is this still an issue. I've been looking over the code and can't make out anything immediately that should cause this. My own tests were consistent, too. After a password change, only the new password works.

Your database entry also looks clean. One user with one password.

Written by Dark Horizons on 04.10.2020 at 10:41

I changed my password and now I can login with my new password and with my old password too.

This issue has been fixed within the server move and should no longer occur.
Many thanks for pointing it out, without your old comment that bug would probably have been overlooked.

Written by Starvynth on 11.09.2021 at 16:30

Written by Dark Horizons on 04.10.2020 at 10:41

I changed my password and now I can login with my new password and with my old password too.

This issue has been fixed within the server move and should no longer occur.
Many thanks for pointing it out, without your old comment that bug would probably have been overlooked.

Many thanks to you, Starvynth!

While we are at this...

Did you know that if instead of your password (let's say it's a string 'password' (without the quotes)) you type your password followed up by any string, say 'passwordsdrghçsbntr' (without the quotes) then you are still logged in?

Written by Karlabos on 15.09.2021 at 03:43
Did you know that if instead of your password (let's say it's a string 'password' (without the quotes)) you type your password followed up by any string, say 'passwordsdrghçsbntr' (without the quotes) then you are still logged in?

I cannot reproduce this. Can you do me a favor and delete all of MS' cookies in your browser, then try again?

Written by corrupt on 15.09.2021 at 14:02

Written by Karlabos on 15.09.2021 at 03:43
Did you know that if instead of your password (let's say it's a string 'password' (without the quotes)) you type your password followed up by any string, say 'passwordsdrghçsbntr' (without the quotes) then you are still logged in?

I cannot reproduce this. Can you do me a favor and delete all of MS' cookies in your browser, then try again?

Oh it turns out it was a cookies thing, yep.

It also turns out my password wasn't even the one I thought it was and had to actually ask to send an email to change it, lol
Which was kinda scary because I didn't remember which email this was linked to. For an instant I thought I lost my profile there, since there are some emails I lost.

Written by Karlabos on 15.09.2021 at 15:03
Oh it turns out it was a cookies thing, yep.

It also turns out my password wasn't even the one I thought it was and had to actually ask to send an email to change it, lol
Which was kinda scary because I didn't remember which email this was linked to. For an instant I thought I lost my profile there, since there are some emails I lost.

Glad you didn't
And thank you for testing and getting back to us.