[BUG] $ does not work in admin password

[mikesellt]

What happened?

When creating the admin user from the initial setup page, a dollar sign/symbol - $ - can't be used in the password. When setting up the admin account password using a $, I receive a "403 Forbidden" error when trying to login. The password must be changed to something else via the sqlite instructions or redeploying. My deployment is a non-docker installation on a Proxmox LXC using this installation script: bash -c "$(wget -qLO - https://github.com/community-scripts/ProxmoxVE/raw/main/ct/bunkerweb.sh)"

When I redeploy and try creating the admin credentials using a password without a $, the login works correctly without a "403 forbidden" error. I'm not sure if there are any issues with other special characters.

How to reproduce?

Install Bunkerweb, create login with a password that contains a $ - can't login and get "403 Forbidden"

Install Bunkerweb, create login with a password that does not contains a $ - login works properly

Configuration file(s) (yaml or .env)

Relevant log output

BunkerWeb version

1.6.0

What integration are you using?

Linux

Linux distribution (if applicable)

No response

Removed private data

• I have removed all private data from the configuration file and the logs

Code of Conduct

• I agree to follow this project's Code of Conduct

[fl0ppy-d1sk]

Hello @mikesellt,

Looks like we can't reproduce your issue. Can you please give us more information :

• OS used
• Browser used
• Browser plugins installed if any

[mikesellt]

I'm deploying Bunkerweb via this script: bash -c "$(wget -qLO - https://github.com/community-scripts/ProxmoxVE/raw/main/ct/bunkerweb.sh)" from this website: https://community-scripts.github.io/ProxmoxVE/scripts?id=bunkerweb

It's basically an easy way to install Bunkerweb on Proxmox. I've tried installing with the default settings and with advanced settings where I can change how much RAM, cores, change IP address and root password, etc...

So the OS is Proxmox. When the installation is complete, I go to the IP/setup to get to the main setup which includes setting the admin password and setting the bunkerweb site name / domain. If I set the admin user password as something containing a dollar sign, when I try and log in I get "403 forbidden." If I re-deploy using the same script and set the password to something without a dollar sign, I don't get "403 forbidden," and I'm let in to Bunkerweb.

The browser I've been using to access my Bunkerweb site is Chrome. I have several plugins installed:

Adblock
Cisco WebEx
DownThemAll!
Files Explorer
Google Docs offline
Image Downloader - Imageye
Keepa
Media Player
OneTab
Open in VLC
Pushbullet
Readeck
Session buddy
Simple Mass Downloader
Tab Suspender
uBlock Origin
and last, but not least, Zoom

I haven't tried to set the password using any other browsers.

[TheophileDiot]

I’ll try to recreate the bug tomorrow and let you know !

[TheophileDiot]

@mikesellt I tried it in a debian environment and it worked. Please share your logs so we can decipher this.