1
kjs222
mishandled apostraphe in admin/users/users.php
  • 2004/3/31 0:38

  • kjs222

  • Friend of XOOPS

  • Posts: 116

  • Since: 2003/3/1 1


In current version (as of March 30th); if an administrator tries to edit a user name that includes an apostraphe (') then the updateuser() function of modules/system/admin/users/users.php will treat the user name as:

"my/'user"

instead of:
"my'user"

In my case, this caused the function to throw an error. I found it could be solved by adding the following (current cvs line number):

Line 179: $uname = str_replace("\\", "", $uname);

Login

Who's Online

398 user(s) are online (318 user(s) are browsing Support Forums)


Members: 0


Guests: 398


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits