I can't log to play

[commentjouer]

Hello ! I can log to the forum but I can't log to play.
The passwords used for the forum and the game aren't the same for obvious reasons.

The password for the game contain more than 10 characters. I can't put more than 10 characters.
So , I'm unable to log to play. I haven't this problem with the forum.

I don't understand what is the problem. In 2024 , it was my last visit there and I can connect to the game. Whats happened since then ?

[Ytreza]

I also had issues reconnecting after a long time. You can write Aage directly, he should be able to reset the pwd.

[Hagbard]

I have answered by email, if the email address is the same as it used to be.

[commentjouer]

Thanks for the email. The issue is resolved.
I can see that even if this is a little website , the team is reactive.
I'm impressed.

The password was not a password with more than 10 characters as written in my papers. There was more than 10 characters in my papers.
So , I discovered that password can't contain more than 10 characters.
In this case , the problem was from me because I didn't knew than passwords can't be above 10 characters.


I'd like to mention a thing for which I'm a little bit worried.
When I read the email , I saw that it did contained my password in plain text.
I hope that the database with passwords haven't these in plain text.

I'm far to be a cybersecurity expert but I'm a little bit worried.
I know some basis in cybersecurity , one of these is to hash passwords when this is possible.
To hash passwords , some cryptographic hash functions should be avoided when this is possible. Some of these are broken partially or fully.
For example , we avoid md5. If we use a cryptographic hash function , this is better with a salt or / a pepper.
We can do more. I did only mentioned the basis about passwords.

I hope that I don't appear as a rude person. Often , people say me that I'm extremely conservative and excessive about cybersecurity.

[commentjouer]

My password to play to the game , I changed it with success.
Weirdly , I was able to change it but I can read a weird message from PHP after the change (I think that it is from PHP but I'm unsure).
Unhappily , I have not copied the message. So , I can't paste it.

I was able to change my password without any problem but I had this message.
I don't think that it is important but I prefer to tell this experience because I'm maybe wrong.

EDIT : When I wanted to modify the post that you're reading to add a detail. I had a time-out error in the course of my first try to modify this post.

[commentjouer]

My password to participate to the forum , I changed it with success.
Weirdly , I was able to change it. After the change , I can read a weird message mentioning an error 403.

I don't understand why I was redirected to a page with a 403 error.
403 error is about a forbidden access , I don't understand why I was redirected to this page.

Today , I changed the two passwords (Game and forum) but I had a weird message for the two.
I think that these two messages are unrelated to each others.
I don't think that it is important but I prefer to tell this experience because I'm maybe wrong.

[Hagbard]

There are two independent passwords:

Large phpBB3 forum
The password is encrypted (hashed).

Chat forum and games
Only the first ten characters of the password are used.
The password is stored in plain text in the database.

The purpose of the password for the chat forum and games is merely to provide basic protection against pranksters disrupting games or posting chat messages under someone else's name.

[commentjouer]

Thanks you for your answer ! The stuff was explained in some lines.

[Ytreza]

I think it would be good to warn that the password for playing is not encrypted.
This can be added in the remark "if you are new, this is also the registration, just choose an alias and a password".

Otherwise people might use their usual password on this website, which is very bad.

[commentjouer]

I think it would be good to warn that the password for playing is not encrypted.
This can be added in the remark "if you are new, this is also the registration, just choose an alias and a password".

Otherwise people might use their usual password on this website, which is very bad.

I have to admit that I didn't thought to suggest this. I agree with you.