Using # (Hash) in Internet Password fails URL validation

HCL Domino Domino Forum
1

Dear All,

We are facing a strange problem related to user Authentication by passing user name and password in URL.

As per our password policy it is mandatory to have # as one of the character in our password. We have used LDAP policy and synchronised notes Internet password with it. To give a single point access to user we pass the user name and password via url.

e.g. http://servername/mail/maildbname.nsf?login&user=username&pwd=password&RedirectTo=mail/maildbname.nsf

However, when the password doesn’t contain # it works fine, but if it has any character with # in it, it fails to authenticate the user.

We can certainly change our policy to not have # as mandatory or not allowing # in password. But there should be some short of logic behind this not working as desired. Any help in this regard will be appreciated.

Thanks in advance

Jagbandhu Singh.

2

Subject: Using # (Hash) in Internet Password fails URL validation

Can you try to escape/encode the password and then send it across to the server via URL.

Using Javscript -

escape(password text field value)

or formulas -

@urlencode(“Domino”;password text feild)

Just an idea

–Phani

3

Subject: Using # (Hash) in Internet Password fails URL validation

You can’t use a # sign in a URL as it’s a reserved character and will be ignored (you should see it near the end of Domino URLs quite often actually). Instead you can convert it at runtime to %23 and the browser will interpret it correctly.

Merry Christmas!