Download & Extend

Profile field categories containing slash characters impossible to edit under "My account"

Project:Drupal core
Version:5.x-dev
Component:profile.module
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed (won't fix)

Issue Summary

The profiles module allows administrators to create custom profile fields, which are grouped into categories that the administrator specifies. These category names are allowed to contain slashes, such as "this/that example".

Later, when users attempt to edit information under My Account -> Edit, categories containing slash characters appear empty even though they should display editable profile fields. I suspect that the problem is that the slash character is being processed as part of the URL:

http:// somedomain/user/2/edit/this/that+example (clean URLs)
http:// somedomain/?q=user/2/edit/this/that+example

Removing the slash characters from affected categories under User Management -> Profiles seems to resolve the problem.

Ideally, slash characters could be included in category names. At the very least, admins should be prevented from entering slash characters when typing a category name.

Comments

#1

Version:5.3» 5.x-dev

I submitted this for Drupal 5.3, but it's still an issue as far as I can tell. I don't have a Drupal 6 site to test it.

To reproduce:
1) Go to User Management -> Profiles
2) Add a new field of any type
3) In the top "Category" field, enter a name that contains a forward slash character, eg "some/thing"
4) Go to My account -> Edit, and click on the Category title from step 3

You will get an empty page with "Submit" and "Delete" buttons at the bottom, just as if you manually entered a URL with a non-existent category, eg:
http:// somedomain/user/1/edit/SomeNonExistentCategory

Again, I think the reason is that the / character is incorrectly appearing as part of the URL, and that's mangling the way Drupal processes the request. Is there a way to escape the / character so that everything displays correctly?

#2

Status:active» closed (won't fix)

Considering the time elapsed between now and the last comment plus the fact that D5 is no longer supported, I am closing this ticket.

nobody click here