Snitz Forums 2000 - Quotation mark in username wreaks total havoc...

Snitz Forums 2000

Username:	Password:
Save Password
Forgot your Password?

All Forums

Snitz Forums 2000 DEV-Group

DEV Bug Reports (Closed)

Quotation mark in username wreaks total havoc...

Forum Locked

Topic Locked

Printer Friendly

Author

Topic

SPulley
Starting Member

USA
46 Posts

Posted - 05 March 2003 : 03:09:28

I had a user today sign up and use ICE "T" as his username. It caused the forum to throw all kinds of javascript errors and create broken links. You couldn't edit his profile because it wouldn't come up correctly. I ended up changing his username directly in the database to fix all the crap that was going on. I also added the " character to my username filter to keep it from happening again.

Have fun and be good!!

Shad Pulley
www.mylargescale.com/forum

RichardKinser
Snitz Forums Admin

USA
16655 Posts

Posted - 05 March 2003 : 05:06:46

I've been playing around with this, and don't know if this has any side effects, but you might try the following and see if it fixes the problem:

in inc_func_common.asp around line #378 (in the chkString function) find the following:

			fString = replace(fString,"+","&#043;")

insert the following line of code just above that line:

			fString = replace(fString,"""","&quot;")

so that it now looks like this:

			fString = replace(fString,"""","&quot;")
			fString = replace(fString,"+","&#043;")

RichardKinser
Snitz Forums Admin

USA
16655 Posts

Posted - 17 June 2003 : 08:13:01

addressed here:

http://forum.snitz.com/forum/topic.asp?TOPIC_ID=45290

Topic

Forum Locked

Topic Locked

Printer Friendly

Jump To:

Snitz Forums 2000

This page was generated in 0.15 seconds.