1. Forum
  2. FIDO
  3. MYSTIC

  • Password question for blacklisted usernames?

    From Björn Wiberg@2:201/137 to g00r00 on Tue Jul 27 14:59:00 2021
    Hello g00r00!

    I just noticed that at the login screen, if one enters a blacklisted (trashcan.dat) username, Mystic appears to proceed asking for a password instead of asking for a[n allowed] username again:


    [■] Enter your username: 01

    Sorry, that username is unacceptable.

    [■] Enter your password: **

    Invalid password.

    [■] Enter your password: **

    Invalid password.

    [■] Enter your password: **

    Invalid password.

    Reset password using e-mail? Yes No

    Send a password inquiry message to the SysOp? Yes No

    (disconnected)


    There is no user with username "01" here, by the way. =)

    Best regards
    Björn
    --- Mystic BBS v1.12 A47 2021/07/23 (Linux/64)
    * Origin: Star Collision BBS, Uppsala, Sweden (2:201/137)
  • From g00r00@1:129/215 to Björn Wiberg on Tue Jul 27 09:45:40 2021
    I just noticed that at the login screen, if one enters a blacklisted (trashcan.dat) username, Mystic appears to proceed asking for a password instead of asking for a[n allowed] username again:


    [■] Enter your username: 01
    There is no user with username "01" here, by the way. =)

    Users can log in with their user number, so in this case you're trying to log in as user ID #1. You shouldn't be adding user numbers into the trashcan just user names so Mystic is doing what it should do here.

    With that said though I will put a check in so that if a number is entered it won't display that message IF you put a number in the trashcan file. Mystic already prevents people from entering a user name that is a number so you don't have to worry about that.

    ... There is an exception to every rule, except this one.

    --- Mystic BBS v1.12 A47 2021/07/23 (Windows/64)
    * Origin: Sector 7 * Mystic WHQ (1:129/215)
  • From Björn Wiberg@2:201/137 to g00r00 on Tue Jul 27 19:37:03 2021
    Hello g00r00!

    Thank you for your reply!

    On 27 Jul 2021, g00r00 said the following...
    Users can log in with their user number, so in this case you're trying
    to log in as user ID #1. You shouldn't be adding user numbers into the

    Ah, that explains it -- thanks!

    to log in as user ID #1. You shouldn't be adding user numbers into the trashcan just user names so Mystic is doing what it should do here.

    OK! Thanks! I'll remove those entries.

    Best regards
    Björn

    --- Mystic BBS v1.12 A47 2021/07/23 (Linux/64)
    * Origin: Star Collision BBS, Uppsala, Sweden (2:201/137)