Hello. I created a dummy account in the username with numbers and special characters. This raises a flag because it can be use for SQL injections.
How can I configure so it would say invalid character is if I enter this character. [\<|\>|\"|\'|\%|\;|\(|\)|\&|\+|\-]
Can you show me where to configure this? Thanks.
Thank you for contacting us.
You actually register an user in Joomla! - not JomSocial. In first step of registration flow you cerate a Joomla! account and user name is part of it.
As far I know you can't forbid any special characters in user name.
Please, if you have doubts if this could be a subject of SQL injection abuse - post on Joomla! forum as we can't do anything with Joomla! com_users.
- Instead of saying: 'it's not working', explain the problem in detail.
- Screenshots with the URL visible in them and the problem marked are more than welcome.
- Tell us how to replicate the problem, we can't fix it if we can't find it.
- Make sure that your site/server meets JomSocial System Requirements
- Make sure to setup JomSocial Cron Job
- Always provide us with access details to the backend and ftp. We need it to debug problems.
- If you have a similar problem, but a solution you found isn't working, open a new thread instead of 'merging' with an existing one.
- Use the "Thank You" feature on any post that helped you
I found out that it does recognizes illegal characters in the username. The system return with a “ Username contains improper value” whenever you use one of the characters below. Not sure why * is not an illegal character.
<
>
"
'
%
;
(
)
&
-
|
* alone won't do a thing :) And this is question to Joomla! developers ;)
- Instead of saying: 'it's not working', explain the problem in detail.
- Screenshots with the URL visible in them and the problem marked are more than welcome.
- Tell us how to replicate the problem, we can't fix it if we can't find it.
- Make sure that your site/server meets JomSocial System Requirements
- Make sure to setup JomSocial Cron Job
- Always provide us with access details to the backend and ftp. We need it to debug problems.
- If you have a similar problem, but a solution you found isn't working, open a new thread instead of 'merging' with an existing one.
- Use the "Thank You" feature on any post that helped you
