DirectAdmin activation email

[qba82]

Hi,

blesta create automatically password for new directadmin accounts, but when it use special characters like < then it don't send full password to user in activation email, for example:

blesta created new directadmin account with password: sdaf3<2f245b53

in activation email for user it will show password is: sdaf3

 

[Tyson]

If you go to the client's email log and view that email, do you see the full password?

[qba82]

Hi, today another client get wrong password, I just checked Email log, and password was correct there, but client get wrong one, it was cut just after < including < sign.

[Tyson]

It sounds like the problem is that the email they receive is an HTML version, and the password contains a special HTML character, "<", which begins an HTML tag. The HTML renderer takes "<" and everything after until a closing ">" character to represent an HTML tag, and that is not shown as text to the user. If the user views the Text version of the email, however, they should see the password correctly.

If you want to resolve the password truncation issue in the HTML version of the email, the password itself should be escaped for HTML. To do so, you will have to update your email template. There is a tag in the email template that represents the password, like "{password}". Change that tag to "{password | escape}". Then, those special characters, like "<", will be displayed correctly and the entire password will be visible. Just set that for the HTML version of the email, not the text version.

[qba82]

Ok I will try that.

[qba82]

What if there is such a tag in email?

{service.direct_admin_password}

[Jono]

Then you would do {service.direct_admin_password | escape} I believe.

[Paul]

1 hour ago, Jono said:

Then you would do {service.direct_admin_password | escape} I believe.

Will this be an issue for everyone using DA? Should this be the recommended tag in the doucmentation?

[qba82]

Hi, I have applied {service.direct_admin_password | escape} tag, but some chars are not showed correctly, for example:

& is showed in email as &amp;

< is showed in email as &lt;

[Jono]

Keep in mind that you only want to add "| escape}" in the HTML and not the Text version.  Is that the case? 

[qba82]

Yes I know, I checked without "| escape}" tag, in this case password is cut just before < > or &, but if I use "| escape}" tag, then it is not cut but it is showing &amp; instead & and &lt; instead <

[Jono]

8 hours ago, qba82 said:

Yes I know, I checked without "| escape}" tag, in this case password is cut just before < > or &, but if I use "| escape}" tag, then it is not cut but it is showing &amp; instead & and &lt; instead <

Sorry, I had a typo in my last answer.  I meant to say that you don't want "| escape}" in the text version.  Is that the case?

[qba82]

text version is not a problem, I get errors only in html version

[Jono]

I see, I'll try to do some testing and see if I can replicate this and find a cause.

[Paul]

FYI, there's a task for this. CORE-3856 should be resolved in the final release of 4.12.0.

[Jono]

Instead of "| escape}" use "| safe}"