Passwords with special characters & login problems

Passwords that contain apostrophes seem to prevent logins via the 'activation panel' in most TTG games, even though logging in to the website works.

More specifically, when my password contains an apostrophe, I cannot activate my games via login - I am told I entered the wrong password. Immediately after changing my password and removing the apostrophe, however, the activation works properly (via login).

For a long time, I had been activating my games via serial number because of this problem. Only with the recent game bundle did I uncover this problem, as the lack of a serial number activation in this particular product forced me to investigate.

PS - This isn't a call for support, per se; my games are working fine now. Just wanted let folks know this problem exists.

Comments

  • edited September 2010
    If it doesn't let you enter your password--and passwords with non-alphanumeric characters -are- normal--then it's a problem. Toss a bug ticket to support.
  • edited September 2010
    Considering apostrophes are the string constant delimiters in SQL I'm hoping there's not another tale of Little Bobby Tables ahead for Telltale... :D
  • edited September 2010
    Leak wrote: »
    Considering apostrophes are the string constant delimiters in SQL I'm hoping there's not another tale of Little Bobby Tables ahead for Telltale... :D

    Little Bobby Tables's sister is apparently named "Help I'm trapped in a driver's license factory".
  • edited September 2010
    I can't imagine Telltale not using prepared statements.
  • edited September 2010
    If the forums disappear in the next two days, you'll know why.
  • edited September 2010
    I didn't faced this problem, most of the times I use letters and numbers only.. Sometimes some special characters, but not apostrophes. I'll keep it in mind.
  • edited September 2010
    More likely is that it's an issue with gpc_magic_quotes in php, so your ' is becoming \' before it goes into a hashing algorithm.
  • edited September 2010
    More likely is that it's an issue with gpc_magic_quotes in php, so your ' is becoming \' before it goes into a hashing algorithm.

    Does that means the passwords are stored in plaintext in their database? I mean, shouldn't they be hashed and/or encoded prior to being stored?
This discussion has been closed.