From: webERP D. <web...@li...> - 2013-07-19 04:00:20
|
Yes - I've been using pattern="[0-9a-zA-Z_]*" to prevent input of dodgy characters see http://www.weberp.org/wiki/TransitionToHtml5 <http://www.weberp.org/wiki/TransitionToHtml5> I am sure there are plenty of other places this should be used too - I noticed your nice use of pattern=".{4,}" to ensure the text entered is at least 4 characters long. You are obviously much better with regular expressions than I am. On 19 July 2013 at 15:46 webERP Developers <web...@li...> wrote: > *Hi, Phil:* > > I've tried to revise some scripts to meet html5 standard and found > the spec should be revised: > > 1) There are illegal characters not allowed in server side. I think > this should be verified before the data send to server, otherwise, users > will be frustrated. > 2) There are special string not allowed such as 'admin' in > WWW_Users.php, I think this string should be checked too. > Not sure if there are others which proceed in server side only. > > Just my2cent. > > Best regards! > > Exson > > > > > -- > View this message in context: > http://weberp-accounting.1478800.n4.nabble.com/Intention-to-roll-up-new-version-and-future-plans-tp4656547p4656618.html > Sent from the web-ERP-developers mailing list archive at Nabble.com. > > ------------------------------------------------------------------------------ > See everything from the browser to the database with AppDynamics > Get end-to-end visibility with application monitoring from AppDynamics > Isolate bottlenecks and diagnose root cause in seconds. > Start your free trial of AppDynamics Pro today! > http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk > _______________________________________________ > Web-erp-developers mailing list > Web...@li... > https://lists.sourceforge.net/lists/listinfo/web-erp-developers Phil Ph: +64 (0)275 567890 Skype: daintree http://www.logicworks.co.nz |