Currently, the wifidog-auth server only allows local database authentication accounts for regular users to be composed of numbers and letters (upper or lower case).
In order to fully support complex and secure passwords, standard ascii symbols, numbers, upper and lowercase letters should all be supported up to and including a password size of 40 chars. The username field should support at least 40 chars, to support long SIDs, and long first, middle, and last names, when using a convention for naming such as "firstname.middlename.lastname.number(company org)"
This is quite a common security pitfall in some web / database information systems, as it forces a user to use a less secure password. This is often done because it is somewhat hard to protect symbols from being used as SQL injection attacks or to corrupt sql statements from the software to the database. Commonly escaping the chars used for the password and username (the username should allow for spaces, numbers, upper and lower letters, and symbols, as well.) when writing to the database should solve this problem, and add for much additional security.
