Welcome, Guest. Please login or register.
Did you miss your activation email?
May 26, 2012, 08:34:49 PM

Login with username, password and session length
Search:     Advanced search
Wollen Sie dem WebsiteBaker Team beitreten?
Nähere Informationen finden Sie unter hier und auf unserer neuen Webseite.
155552 Posts in 21715 Topics by 7737 Members
Latest Member: gx-world
* Home Help Search Login Register
Pages: [1]   Go Down
Print
Author Topic: WB 2.8.2 usernames including "." disallowed?!  (Read 275 times)
Scone Top

Offline Offline

Posts: 1


« on: September 26, 2011, 05:38:11 AM »


I just installed WB 2.8.2 in my test environment...

Attempted to creater my first Username...  and was met with this error message...
        "Invalid chars for username found / The username you entered was too short"
The username did include a "." (dot/period/fullstop), well two actually.  This kind of username has been working fine with WB 2.8.1.

Considering our local security policy requirements to use amix of alpha/numeric/non-alphanumeric chars in usernames (as well as passwords)...

Why so strict? 
What can be done to allow "." characters in WB usernames?

This could be a show stopper for my planned seamless WB upgrade on a medium sized Intranet site...

Many thanks in anticipation,
-- Scone Top.
Logged
BlackBird
AddOn Development
*
Offline Offline

Posts: 2069



WWW
« Reply #1 on: September 26, 2011, 09:26:25 AM »

In WB 2.8.2, there's a regexp checking usernames:

/^[a-z]{1}[a-z0-9_-]{2,}$/i

This means:

* Must begin with at least one letter (^[a-z]{1})
* Can contain any number > 2 of a-z, 0-9, Underscores and Hyphens ([a-z0-9_-]{2,})

No other chars - including . and @ (if you'd like to use mail addresses as usernames) - are allowed.

See admins/users/save.php
Logged

Alle großen Veränderungen beginnen im Kleinen
Argos
Moderator
**
Offline Offline

Posts: 2161


WWW
« Reply #2 on: September 29, 2011, 11:16:01 AM »

What a ridicilous change! I just upgraded a client site from 2.8.1 to 2.8.2 and also get this error. This means that the policy of creating usernames of my client cannot be continued because of this weird change in WB. I'm really getting frustrated by the silly "security" changes in WB lately. What's the next idea to decrease usability??

I tried to add the @ and . to the pregmatch thingy, but that didn't work. Only removing the pregmatch code helped.
« Last Edit: September 29, 2011, 11:24:12 AM by Argos » Logged

Jurgen Nijhuis
Argos Media
Heiloo, The Netherlands
WB Showcase: http://www.mywebsitebaker.com/pages/showcase.php?v&category_id=1242&count=30
----------------------------------------------------------------
Please don't request personal support, use the forums!
BlackBird
AddOn Development
*
Offline Offline

Posts: 2069



WWW
« Reply #3 on: September 29, 2011, 11:29:47 AM »

This pattern should work.

/^[a-z]{1}[a-z0-9@\._-]{2,}$/i

* Must begin with at least one letter (^[a-z]{1})
* Can contain any number > 2 of a-z, 0-9, Underscores, Hyphens, Dots and @ ([a-z0-9@\._-]{2,})
Logged

Alle großen Veränderungen beginnen im Kleinen
Pages: [1]   Go Up
Print
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines Valid XHTML 1.0! Valid CSS!