adam.burst.net Posted March 3, 2011 Share Posted March 3, 2011 Initial Thread: http://forum.whmcs.com/showthread.php?p=179772 Summary: When passwords contain <,>,",',& characters, those characters are html encoded before the md5 sum is taken. This creates a problem when you make an API request unless you also run htmlentities() on the password before you take the md5. 0 Quote Link to comment Share on other sites More sharing options...
WHMCS CEO Matt Posted March 3, 2011 WHMCS CEO Share Posted March 3, 2011 This isn't really something that can be changed. Not without making all existing MD5 hashes invalid. So it is a requirement to html entity encode any special characters before creating the MD5 for the API or use the MD5 from the database which is what we recommend (so that the original password is not in the code at all). Matt 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.