[#36814] - Permitted characters in usernames
- New
- Medium
- Build: 4.1-dev
- # 36814
Permitted characters in Usernames
The error message says
No space at beginning or end, at least 2 characters, must not have the following characters: \ " ' % ; ( )
BUT if you try the following
<<<brian>>> validation error
brian>test not accepted
brian<test accepted as brian
brian<>test accepted as briantest
<> Field required: Login Name (Username)
<< Field required: Login Name (Username)
>> validation error
The code is
https://github.com/joomla/joomla-cms/blob/4.1-dev/libraries/src/Table/User.php#L226-L232
So it should be matching on the < and > characters and they should be in the error message
But other parts of the validation are breaking that i think
joomla-cms-bot
- | Labels |
Added:
No Code Attached Yet
|
||
or it should be accepted. Depends if the code is correct or the text is correct
I think the problem is not with the preg_match function
E.g- I removed the '%' character from the string and when I entered the input as '%' it was accepting it as a valid username
I tried a lot of permutations and combinations, and the problem only occurs when inputting "<>", maybe there is a problem with the clean function, because the input "<akshitrattan" is accepted but saved as "akshitrattan".
Hackwar
- | Labels |
Added:
bug
|
||
Hello @krishnagandhicode, I think the issue here is the same...a silently filter is being applied to the username before validating the username special characters, right?
Hello @krishnagandhicode @brianteeman @alikon , I think the issue here is the same...a silently filter is being applied to the username before validating the username special characters, right?
so failed message should be displayed if the user name contains < or > right?