A view name cannot be numeric. This results in a "page not found" on the front and edit/delete links that don't do anything in the back.

This is caused by the load function, that checks if the argument is numeric, and if so, passes the argument as "vid" instead of "name" to the select query. (D6-2.9 includes/view.inc line 1297). This is the same for D5.

There is no validation in the UI to prevent this. The alphanumeric check should be changed so that numeric names aren't allowed.

I added 2 patches, for 5.x-1.7 and 6.x-2.9, where I just added "is_numeric" to the existing check and some extra info in the validation error. Please review these.

CommentFileSizeAuthor
views_name_validation_d6_29.patch605 bytesducktape
views_name_validation_d5.patch628 bytesducktape

Comments

dawehner’s picture

dawehner
Primary language German
commented
Priority: Normal » Minor
Status: Needs review » Reviewed & tested by the community

I think this is really just minor

dawehner’s picture

dawehner
Primary language German
commented
Priority: Minor » Normal

bump up

esmerel’s picture

esmerel commented

This makes it impossible to access or delete a view. That's bad :)

merlinofchaos’s picture

merlinofchaos commented
Status: Reviewed & tested by the community » Fixed

Committed to D6 and D7 branches. No one is maintaining D5 except for security patches, so not going to commit to D5.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.