As per the subject, does anyone know what special characters are permitted in $update_pass, or alternatively, what special characters are NOT permitted?

I would think that the ' (apostrophe) character would not be permitted, as the password (and other variables) are wrapped between apostrophes.

Any other characters that you are aware of that can also not be used?

Thanks in advance.

Regards,
John