0002282: Email address containing apostrophe invalid due to magic quotes

Notes
(0005055) stim (reporter) 2011.04.26 13:43	(I don't really think it is necessary to allow ' in email addresses, but currently the program is not behaving like the contract (the regexp) says)

(0005085) jcommelin (reporter) 2011.05.02 21:04	According to RFC 822 it is valid to have an apostrophe in ones email address. Still I think (just like stim) that it is not really necessary to allow them. It brings problems with it like SQL injections and such...

(0007636) bryanw (reporter) 2014.09.25 22:26	Horrible attitude to take, and unfortunately it is pervasive through the Piwigo code. Piwigo is attempting to be an internationally useful program. The fr.piwigo.org forums are full of complaints about errors in email and file names where apostrophe and accents are present. Input sanitation is a basic thing. It is a solved problem. Automatically escaping URLs and email addresses is also a solved problem. Basically, if my file system allows me to name a file "Robert'); DROP TABLE Students;--" then it should handle it. Observe that Mantis (the bug database) doesn't choke and die on accents and apostrophes.

Relationships