1

April 5, 2012

An Integrated Workforce Solution for State/County

2Special Characters in Passwords

Defining the Changes What is changing? Restrict special characters allowed in user passwords

Today there are no restrictions on the special characters used in passwords. OPC 187478 will restrict the use of special characters in passwords as a base change.

The blue hint text next to the password will identify what characters are allowed. Allowable characters are ((!),(@),(#),($),(%),(^),(*),(.),(_)).

Why change? Ongoing security enhancements Restrict malicious access: Special characters can be operators in the SQL database

language. Injecting SQL statements into text boxes could allow hackers to alter or retrieve data.

Prevent “Cross Site Scripting”: Java script can be introduced into a site to re-direct a valid user to an imitation web site to obtain the user’s username and password.

Who is impacted? All VOS Users Individuals, employers, staff, administrators, analysts and providers This will NOT affect the community site or the OPC site

What functions are impacted? All password related functions Registration Reset password Account retrieval process Login of existing user with a “bad” character in the password

When will this change occur? Within the next two weeks

3Walk through affected screens

1) Individual registration entry screen

2) Alert when invalid password is entered

4Walk through affected screens

3) Change password on general information tab

5Walk through affected screens

4) Screen for changing password and alert when invalid new password is entered

6Walk through affected screens 5) Account retrieval for individuals once information has been verified

6) Alert for invalid password

7Walk through affected screens 7) Log in existing user with restricted characters (example: password55&)

8) Alert for invalid Password entered(password8&)

8Walk through affected screens 9) Create new staff

9Questions & Answers

?Corporate Headquarters:

1001 Omaha Circle - Palm Harbor, FL 34683Ph: 727-786-7955 – Fax: 727-786-5871

www.GeographicSolutions.com

West Coast Office: 234 Capitol Street, Suite A – Salinas, CA 93901

Ph: 831-757-4400 – Fax: 831-757-4401