Post on 01-Apr-2015
1
April 5, 2012
An Integrated Workforce Solution for State/County
2Special Characters in Passwords
Defining the Changes What is changing? Restrict special characters allowed in user passwords
Today there are no restrictions on the special characters used in passwords. OPC 187478 will restrict the use of special characters in passwords as a base change.
The blue hint text next to the password will identify what characters are allowed. Allowable characters are ((!),(@),(#),($),(%),(^),(*),(.),(_)).
Why change? Ongoing security enhancements Restrict malicious access: Special characters can be operators in the SQL database
language. Injecting SQL statements into text boxes could allow hackers to alter or retrieve data.
Prevent “Cross Site Scripting”: Java script can be introduced into a site to re-direct a valid user to an imitation web site to obtain the user’s username and password.
Who is impacted? All VOS Users Individuals, employers, staff, administrators, analysts and providers This will NOT affect the community site or the OPC site
What functions are impacted? All password related functions Registration Reset password Account retrieval process Login of existing user with a “bad” character in the password
When will this change occur? Within the next two weeks
3Walk through affected screens
1) Individual registration entry screen
2) Alert when invalid password is entered
4Walk through affected screens
3) Change password on general information tab
5Walk through affected screens
4) Screen for changing password and alert when invalid new password is entered
6Walk through affected screens 5) Account retrieval for individuals once information has been verified
6) Alert for invalid password
7Walk through affected screens 7) Log in existing user with restricted characters (example: password55&)
8) Alert for invalid Password entered(password8&)
8Walk through affected screens 9) Create new staff
9Questions & Answers
?Corporate Headquarters:
1001 Omaha Circle - Palm Harbor, FL 34683Ph: 727-786-7955 – Fax: 727-786-5871
www.GeographicSolutions.com
West Coast Office: 234 Capitol Street, Suite A – Salinas, CA 93901
Ph: 831-757-4400 – Fax: 831-757-4401