# Bug + Security Issue: Special Characters Remote SSID Name

**URL:** <https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777>\
**Category:** Router\
**Created:** [June 9, 2018, 5:41pm UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777 "2018-06-09T17:41:58Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [June 9, 2018, 5:41pm UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/1 "2018-06-09T17:41:58Z")

</div>

Hi @alzhao,  
I think i found a bug today.  
I was trying to connect to a McDonalds free wifi, the name was like so: “McDonald’s Free Wifi”.  
It showed up in the list correctly, with the single quote after the d, but after adding the connection, in the saved stations page it showed up only as “McDonald”.

The wisp connection also failed since it was not able to find that station since it was cropped.  
I guess one of the scripts needs to be guarded for special characters in the SSID name?

Update:  
Yes and it is also a potential security issue, a small but crafty ssid name could cause things to happen on the router, shown in a later post.

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [June 9, 2018, 5:59pm UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/2 "2018-06-09T17:59:31Z")

</div>

Made a local test connection with the same character, same result, it doesn’t work 😃

 ![30](https://forum-static.gl-inet.com/original/1X/e60f07c83144ad5211611d39b9f0239b87f6697b.png)

 ![14](https://forum-static.gl-inet.com/original/1X/93d46b28d8af64370a35a171182c283d2f0f5e41.png)

 ![25](https://forum-static.gl-inet.com/original/1X/9b9d68e7458af46188053815cf89d662a9f25c3b.png)

 ![09](https://forum-static.gl-inet.com/original/1X/6362d4abdc00585c81a1852d0100191b64a14b15.png)

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [June 9, 2018, 6:22pm UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/3 "2018-06-09T18:22:57Z")

</div>

Just for fun a made a more broken one called:

![23](https://forum-static.gl-inet.com/original/1X/6fa4ae5c07ec24a57d7e87fddffd0452be51958a.png)

As expected it breaks even the list:

![07](https://forum-static.gl-inet.com/original/1X/2c528edba80631f7970295d8ca0807f22392cdb3.png)

It means that all handling of the SSID name’s should take into account special characters that can break the parsing in bash scripts.

This is also a security issue because a well crafted SSID name could potentially crash or do funny things on the router, as you can see in the last screenshot, where is “data” coming from?

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [June 12, 2018, 10:34am UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/4 "2018-06-12T10:34:15Z")

</div>

@alzhao could you take a look at this? i hope i can be fixed in the next update, or in v3

---

<div class="post-metadata">

**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\
**Post date:** [June 12, 2018, 11:25am UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/5 "2018-06-12T11:25:51Z")

</div>

Seems this is a problem. Not sure if this is serious bug. But definitely need to fix the UI.

@kyson-lok

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [June 12, 2018, 11:34am UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/6 "2018-06-12T11:34:23Z")

</div>

Thanks @alzhao @kyson-lok

---

<div class="post-metadata">

**Author:** ![kyson-lok](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/kyson-lok/32/185_2.png) [@kyson-lok](https://forum.gl-inet.com/u/kyson-lok)\
**Post date:** [June 12, 2018, 11:52am UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/7 "2018-06-12T11:52:05Z")

</div>

OK, we will check this.

---

<div class="post-metadata">

**Author:** ![Johnex](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/johnex/32/300_2.png) [@Johnex](https://forum.gl-inet.com/u/Johnex)\
**Post date:** [July 11, 2018, 8:09am UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/8 "2018-07-11T08:09:46Z")

</div>

@kyson-lok Will this be fixed for v3? 🙂

---

<div class="post-metadata">

**Author:** ![kyson-lok](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/kyson-lok/32/185_2.png) [@kyson-lok](https://forum.gl-inet.com/u/kyson-lok)\
**Post date:** [July 12, 2018, 2:46pm UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/9 "2018-07-12T14:46:31Z")

</div>

Yes, v3 has fixed it.

---

<div class="post-metadata">

**Author:** ![Henry\_Bruns](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/h/ee59a6/32.png) [@Henry\_Bruns](https://forum.gl-inet.com/u/Henry_Bruns)\
**Post date:** [February 25, 2019, 11:40pm UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/10 "2019-02-25T23:40:56Z")

</div>

It can be, it should be configured allway UTF8 by programmer. Same by gli admin and advanced admin password.

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [October 29, 2025, 2:57am UTC](https://forum.gl-inet.com/t/bug-security-issue-special-characters-remote-ssid-name/3777/11 "2025-10-29T02:57:59Z")

</div>


