fixes #1372

src/server/components/auth.js

@@ -290,7 +290,7 @@ module.exports = {
 
 		let illegal = ["'", '"', '/', '(', ')', '[', ']', '{', '}', ':', ';', '<', '>'];
 		for (let i = 0; i < illegal.length; i++) {
-			if ((credentials.username.indexOf(illegal[i]) > -1) || (credentials.password.indexOf(illegal[i]) > -1)) {
+			if (credentials.username.indexOf(illegal[i]) > -1) {
 				msg.callback(messages.login.illegal);
 				return;
 			}

src/server/misc/messages.js

@@ -3,7 +3,7 @@ module.exports = {
 		invalid: 'invalid name chosen',
 		exists: 'username exists, please try another',
 		allFields: 'please complete all fields',
-		illegal: 'illegal characters in username/password',
+		illegal: 'illegal characters in username',
 		incorrect: 'invalid username and password',
 		charExists: 'character name is taken'
 	},