User Chosen Password may lock out Client from WHMCS

[sohouk]

Note: MD5 passwords is OFF

 

If a client changes their password, and that password contains a reserved character, then they effectively lock themselves out of WHMCS

 

Here is an example that a client used and immediately stuffed any access to their account : &sLw64i3A1

 

I would have assumed there would be some sort of error checking on acceptable characters, but it would appear not.