Describe the bug

Hello.

I tried the "unsecure" method to login : https://subdomain.domain.fr/frss/p/i/?c=auth&a=login&u=USER&p=PASSWORD

It works perfectly if password is without special char inside like "Toto1234" but changing it to "Toto&1234" will not work anywork and gives a "invalid ID" error message.

How could I use this method with a more secure password ?

Thanks

To Reproduce

1. Go to '…'
2. Click on '…'
3. Scroll down to '…'
4. See error

Expected behavior

Use a password with special char inside.
Tested with "&".

FreshRSS version

1.24.3

Environment information

PHP 8.2
MariaDB 10.11
Apache 2.4.59

Additional context

No response