1 (edited by qubertman 2008-02-21 05:07)

Topic: & in username

Usernames containing & are displayed as & in the title and breadcrumb.

2 (edited by whatrevolution 2008-02-21 05:34)

Re: & in username

View source and see if it is actually " & " , no quotes.

& generally isn't allowed in usernames and such, for the chance that it appears in a URL where it is a special character, etc.  Though I can't speak for PunBB itself.  That DOES look like the username is passing through htmlentities() or htmlspecialchars().  Maybe it is going through more than once?

Re: & in username

The same would apply to > and <; these are the only three entities in xml I believe.

I wonder how this is handled in URL? Romanization into ?-??

Re: & in username

whatrevolution is right, the issue is data being run through htmlspecialchars twice.
qubertman: Could you tell me what files you're seeing this in so I make sure I don't miss anything? smile

Re: & in username

profile.php - In the title and in the breadcrumb.

Re: & in username

Fixed

Re: & in username

A note for anyone finding this thread later (as I just did, 10 months later), an upgrade on this forum seems to have changed the opening post content and parsed the second &amp; into &, though it won't happen with this post I'm writing now... in case it happens again (lol) we were talking about the HTML entity for & being printed as plain text.

big_smile