user login name url encoded when shouldn't be

Brought to you by: secureideas, sinukas

#231 user login name url encoded when shouldn't be

Milestone: v1.0 (example)

Status: open

Owner: Randal Rioux

Labels: Interface (166)

Priority: 5

Updated: 2009-11-20

Created: 2009-10-24

Creator: Anonymous

Private: No

I've just created a user and when viewing it at this url admin/base_useradmin.php?action=list the username is wrapped in encoded html tags:

<font color='#ff000'><b>robin</b></font>

The string is being passed through htmlspecialchars when it shouldn't be. The fix is to remove htmlspecialchars from line 163 of admin/base_useradmin.php .

Discussion

Randal Rioux - 2009-11-20

milestone: 467931 --> v1.0 (example)

assigned_to: nobody --> rrioux
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Randal Rioux - 2009-11-20

I don't see this effect when listing users. Are you using the latest code from CVS? If not, which version are you using that gives you this problem? Thanks... Randy

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

user login name url encoded when shouldn't be

Group

Searches

Help

#231 user login name url encoded when shouldn't be

Discussion