0002297: Stripslashes() missing sometimes to display username - Mantis

Piwigo Bugtracker

Viewing Issue Advanced Details [ Jump to Notes ]

[ Issue History ] [ Print ]

ID

Category

Severity

Reproducibility

Date Submitted

Last Update

0002297

[Piwigo] display

tweak

always

2011.05.04 23:41

2011.05.12 15:13

Reporter

LucMorizur

View Status

public

Assigned To

flop25

Priority

normal

Resolution

fixed

Platform

Any

Status

closed

OS

Any

Projection

none

OS Version

ETA

none

Fixed in Version

2.2.2

Product Version

2.2.1

Target Version

2.2.2

Product Build

Summary

0002297: Stripslashes() missing sometimes to display username

Description

When adding user « Test d'apostrophe », the information message says: « User "Test d\'apostrophe" added » (see attached picture).

The same issue occurs for the comment author name (at least, maybe is there some other occurrences of this issue), but there it is more complex and I don't know how to solve it.

Steps To Reproduce

Add a user with characters that should be escaped in the DB

Additional Information

From line 232 of admin/user_list.php:

    if (count($page['errors']) == 0)
    {
      array_push(
        $page['infos'],
        sprintf(
          l10n('user "%s" added'),
          stripslashes($_POST['login'])
          )
        );
    }

The stripslashes() must be added on line 238.

Tags

No tags attached.

browser

any

Database engine and version

PHP version

Web server

Apache 1.3.x

screen_copy.png [^] (6,511 bytes) 2011.05.04 23:41

Relationships

Notes
(0005094) svn (reporter) 2011.05.12 15:08	[Subversion] r10856 by flop25 on trunk -----[Subversion commit log]---------------------------------------------------- bug:2297 stripslashes added

(0005095) svn (reporter) 2011.05.12 15:11	[Subversion] r10857 by flop25 on branch 2.2 -----[Subversion commit log]---------------------------------------------------- merge r10856 from trunk to branch 2.2 bug:2297 stripslashes added

Issue History
Date Modified	Username	Field	Change
2011.05.04 23:41	LucMorizur	New Issue
2011.05.04 23:41	LucMorizur	File Added: screen_copy.png
2011.05.04 23:41	LucMorizur	browser	=> any
2011.05.04 23:41	LucMorizur	Web server	=> Apache 1.3.x
2011.05.04 23:48	LucMorizur	Issue Monitored: LucMorizur
2011.05.12 15:08	svn	Checkin
2011.05.12 15:08	svn	Note Added: 0005094
2011.05.12 15:11	svn	Checkin
2011.05.12 15:11	svn	Note Added: 0005095
2011.05.12 15:13	flop25	Assigned To	=> flop25
2011.05.12 15:13	flop25	Status	new => closed
2011.05.12 15:13	flop25	Resolution	open => fixed
2011.05.12 15:13	flop25	Fixed in Version	=> 2.2.2
2011.05.12 15:13	flop25	Target Version	=> 2.2.2

Mantis 1.1.6[^]

Copyright © 2000 - 2008 Mantis Group