BugNET

I was fiddling with installing a fresh install of BugNET today. In doing so I ran into some problems with the web installer. Basically I could never get the installer to save a password for the admin account.
I ran the installer through the debugger and traced the problem to line 305 of Installer.aspx.cx. The call to Membership.CreateUser( ... ) was failing with an Invalid Password error. This causes the procedure to jump over the code block that creates the default user, which it should. The problem is when CreateDefaultData() returns false the caller InstallWizard_Finish() is ignoring the error. This causes the wizard to complete and you end up with an install with no admin account.
The other problem is that the validation of the password in the control is not as strict as the validation done by Membership.CreateUser( ... ). This is what allowed you down this code path in the first place.
Example: Password01 is accepted by the control on the page but rejected by the call to Membership.CreateUser( ... ). On the other hand Password-01 is accepted by both.

I would have entered a bug for this but I don't have write access to the Bug tracker.

Tungsten