Username guidelines are not enforced

slimandslam - September 9, 2006 - 20:23
Project:Drupal
Version:7.x-dev
Component:user.module
Category:bug report
Priority:minor
Assigned:Unassigned
Status:closed
Description

On the page:

?q=user/register

It says:

"Your full name or your preferred username; only letters, numbers and spaces are allowed."

But it allows '@' (and possibly other) symbols. So, fred@gmail.com, works as a username.

So either the guidelines are wrong or the input filter is broken.

#1

magico - January 15, 2007 - 17:08
Version:4.7.3» 5.x-dev

Confirmed.

It allows punctuation symbols like @ and £, so guidelines should be updated.

#2

ricabrantes - March 3, 2008 - 12:15
Version:5.x-dev» 7.x-dev

This bug still active in D7.x-dev It allows punctuation symbols like @ £ and €

#3

mot - July 11, 2008 - 17:13

Well, practically the message itself is wrong, but reading it assuming the rightness wouldn't lead to any problems. So I think it is more adviseable to say that this is an undocumented feature.

Has anyone checked the code? As long as this isn't done, I close it since it does not bother. Before re-opening it, please verify the sourcecode first wether or not this is an input validation error.

#4

mot - July 11, 2008 - 17:14
Status:active» closed
 
 

Drupal is a registered trademark of Dries Buytaert.