I found a specific bug in NppFTP where if the FTP password starts with a non-ASCII character (specifically the "£" symbol, hex C2A3 in UTF-8 or A3 in ANSI), the authentication fails with "530 Login incorrect".
Steps to reproduce:
Set an FTP password starting with "£" (e.g., £Password123).
Try to connect via NppFTP.
Connection fails.
Change the password moving the "£" to any other position (e.g., P£assword123).
Connection works perfectly.
Observations:
It seems the plugin's parser or the obfuscation algorithm fails to correctly handle/encode the first byte if it's an extended ASCII character. Writing the password directly in nppftp.xml as a character entity (£) results in the password being cleared upon restart, suggesting a validation issue at startup.
I found a specific bug in NppFTP where if the FTP password starts with a non-ASCII character (specifically the "£" symbol, hex C2A3 in UTF-8 or A3 in ANSI), the authentication fails with "530 Login incorrect".
Steps to reproduce:
Set an FTP password starting with "£" (e.g., £Password123).
Try to connect via NppFTP.
Connection fails.
Change the password moving the "£" to any other position (e.g., P£assword123).
Connection works perfectly.
Observations:
It seems the plugin's parser or the obfuscation algorithm fails to correctly handle/encode the first byte if it's an extended ASCII character. Writing the password directly in nppftp.xml as a character entity (£) results in the password being cleared upon restart, suggesting a validation issue at startup.