Bug with changing password/registering (need password reset)

[Quanttek]

First of all sorry for my bad english. I'm not a native speaker.

I Will tell u the story:
Today i downloaded the TSA Client to test it, but during logging in, I got the error "Your username and/or password consists of illegal characters!" I looked into SpringLobby and saw at the login after a manually login a too long password in the login box. I wondered, because the pw I set was alot shorter. After this I used the command to change my password "/changepassword2 MYNEWPASSWORD" and here is the answer as log:

[00:05] ** Server ** Password changed successfully to rJmElgHXA/ppUCvlEIOhkg==
[00:07] Fehler: Der Befehl (/changepassword rJmElgHXAxxxxxxxxxxxxxxxxxxxxx= RANDOMPW) existiert nicht, benutze '/help' um alle verfügbaren Befehle zu sehen.
[00:08] Fehler: Der Befehl (/changepassword rJmElgHXAxxxxxxxxxxxxxxxxxxxxx= RADNOMPW) existiert nicht, benutze '/help' um alle verfügbaren Befehle zu sehen.
[00:08] ** Server ** Incorrect old password.
[00:09] Fehler: Der Befehl (/changepassword rJmElgHXAxxxxxxxxxxxxxxxxxxxxx= RANDOMPW) existiert nicht, benutze '/help' um alle verfügbaren Befehle zu sehen.
[00:09] ** Server ** Verbindung zum Server unterbrochen, Chat geschlossen.

Translated:

[00:05] ** Server ** Password changed successfully to rJmElgHXAxxxxxxxxxxxxxxxxxxxxx=
[00:07] Error: The command (/changepassword rJmElgHXAxxxxxxxxxxxxxxxxxxxxx= RANDOMPW) didn't exist, pls use '/help' to see all commands.
[00:08] Error: The command (/changepassword rJmElgHXAxxxxxxxxxxxxxxxxxxxxx= RANDOMPW) didn't exist, pls use '/help' to see all commands.
[00:08] ** Server ** Incorrect old password.
[00:09] Error: The command (/changepassword rJmElgHXAxxxxxxxxxxxxxxxxxxxxx= RANDOMPW) didn't exist, pls use '/help' to see all commands.
[00:09] ** Server ** Connection to server interupted, chat closed.

(at 00:05 at 00:08 i used "/changepassword2 )

The password i wanted to change to had special character and also the password, i used at the register box.
I think it created in both cases a random hash, but when i wanted to change my pw it created a hash, which didnt fit the requirements for a password.

I pasted my new password, the random hash, at the login box of the TSA client and I got the error "Your username and/or password consists of illegal characters!" again.

Can someone pls fix the bug, that a random hash is created if ur password didnt fit the requirements or pls reset my password. thx

Yours sincerely,

Quanttek

[knorke]

How I reproduced it:

1) original password has no special characters (just letters)

2) in springlobby: /changepassword dumdidum
(new password is just letters too)

3) springlobby crashes (the login on SL bug tracker still does not work for me but i submited that error thing)

4) in the password field of SL it now shows **********************
(many more * than "dumdidum" is long)

5) log in with this ********************** works

6) login with "dumdidum" does not work

Does it accidently save hash instead of password?

Also during testing 6) I lost the *'s in password field and thus access to my test account
If someone can please send me forum pm with new password for this account: snackuser

[Silentwings]

My springlobby always displays something like *************** in the password box, even though my password isnt that long. I can always log in so it is saving the password correctly.

[knorke]

My springlobby always displays something like *************** in the password box, even though my password isnt that long. I can always log in so it is saving the password correctly.

Delete the *************** and enter your password again.
If it still works: change your password and see if it still works.
(at your own risk)

[Quanttek]

This Bug can also starts, if u put in ur first password special letters. Then u didnt need to /changepassword and u have the bug, that (usually) hash and pw swapped their fuctions. The pw is now the hash for the hash, which is now ur pw.
The other case, where u get the bug is, if u want to change ur password. At me, my sl didnt crash and shows me the new password, which is never the password I set. It is everytime a random hash with a "==" at the end. TSA forbid u to set pws with special letters, which prevent the bug.