Jump to:
| Project: | Drupal core |
| Version: | 5.x-dev |
| Component: | profile.module |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed (won't fix) |
Issue Summary
The profiles module allows administrators to create custom profile fields, which are grouped into categories that the administrator specifies. These category names are allowed to contain slashes, such as "this/that example".
Later, when users attempt to edit information under My Account -> Edit, categories containing slash characters appear empty even though they should display editable profile fields. I suspect that the problem is that the slash character is being processed as part of the URL:
http:// somedomain/user/2/edit/this/that+example (clean URLs)
http:// somedomain/?q=user/2/edit/this/that+example
Removing the slash characters from affected categories under User Management -> Profiles seems to resolve the problem.
Ideally, slash characters could be included in category names. At the very least, admins should be prevented from entering slash characters when typing a category name.
Comments
#1
I submitted this for Drupal 5.3, but it's still an issue as far as I can tell. I don't have a Drupal 6 site to test it.
To reproduce:
1) Go to User Management -> Profiles
2) Add a new field of any type
3) In the top "Category" field, enter a name that contains a forward slash character, eg "some/thing"
4) Go to My account -> Edit, and click on the Category title from step 3
You will get an empty page with "Submit" and "Delete" buttons at the bottom, just as if you manually entered a URL with a non-existent category, eg:
http:// somedomain/user/1/edit/SomeNonExistentCategory
Again, I think the reason is that the / character is incorrectly appearing as part of the URL, and that's mangling the way Drupal processes the request. Is there a way to escape the / character so that everything displays correctly?
#2
Considering the time elapsed between now and the last comment plus the fact that D5 is no longer supported, I am closing this ticket.