Skip to content

Horse Tools 1.3.43

Choose a tag to compare

@github-actions github-actions released this 11 Aug 06:51
· 3 commits to main since this release
  • Fixed: the login security question rejected correct Vietnamese answers. The answer was compared with strtolower(), which only lowercases the 26 English letters. It turns "Bé" into "bé" but leaves "Đào", "Ánh", "Út" and "Ơn" exactly as they were — so an owner who saved "Đào" and typed "đào" was refused, every time, with an answer that was right. Accented capitals are precisely where nicknames and names begin, so the commonest kind of answer was the one that could not work.
  • And you were never told which field was wrong. With user-enumeration protection on, every login error is replaced by a generic "Login failed" so the screen cannot reveal whether an account exists. A failed security question reveals no such thing — the message is identical whether or not the account exists — so it now comes through intact, and says specifically whether the answer was wrong or the box was left empty. Reported from a site where a correct password read as a wrong one for exactly this reason. It is the second time this masking has swallowed a message it should not have; the first was the 2FA screen in 1.3.5.
  • Two more ways a right answer used to be a wrong one: a double space between words, and the two legal encodings of the same Vietnamese letter (composed "ắ" versus "ă" plus a separate accent — identical on screen, different bytes, and which one you get depends on the keyboard). Both are now handled. Unicode normalisation needs the intl extension; without it the rest still applies.
  • Diacritics still count. "dao" is not "đào" — nothing here makes the answer easier to guess.

Install: download horse-tools-1.3.43.zip below, then Plugins → Add New → Upload Plugin.