[fixed] I got a 1 char!!!!

[__A]

Ok i couldnt post in vB3 bugs but you can use returns in you name and it will count them as letters but will take them out or replace them with spaces. You could make a username that looks identical to a admin/mod!!

I couldnt find a better why to contact a support person and last time i tried to report a flaw directly they didnt take it seriously!

[I am not SteveMachol]

I am admin!! LOL

[Steve Machol]

You made your point. :rolleyes: Moving to Bugs.

[nuno]

huh? :confused:

[filburt1]

Originally posted by

A
Ok i couldnt post in vB3 bugs but you can use returns in you name and it will count them as letters but will take them out or replace them with spaces. You could make a username that looks identical to a admin/mod!!

Not identical, it won't be formatted as defined by the usergroup.

[Ghostsuit]

Originally posted by filburt1
Not identical, it won't be formatted as defined by the usergroup. Yeah but it would still confuse people.

[Martyjp]

Originally posted by Steve
Machol
I am admin!! LOL I got banned from the UBB forums for pointing out a similar bug (only theirs was registered members could change their name to that of a name already in use), I was told that under no circumstances you could, so I went and did it on their forums, they werent impressed and banned me. Funny it was about the time i moved over to vb ;)

Obviously registering a name like an admin isnt going to fool many people, as registered members are normaly familier with the admins and the titles they have and you can spot a faka a mile off. However, you could easily pass yourself off as a registerd member and flame and troll and the majority of members wouldnt notice the difference

[Steve Machol]

Originally posted by Martyjp
I got banned from the UBB forums for pointing out a similar bug (only theirs was registered members could change their name to that of a name already in use), I was told that under no circumstances you could, so I went and did it on their forums, they werent impressed and banned me. I guess our priorities are a little different. We'd rather fix bugs than hide them.

[Kier]

Originally posted by

A
Ok i couldnt post in vB3 bugs but you can use returns in you name and it will count them as letters but will take them out or replace them with spaces. You could make a username that looks identical to a admin/mod!!

I couldnt find a better why to contact a support person and last time i tried to report a flaw directly they didnt take it seriously! Fixed

[A]

Originally posted by Kier
Fixed
Umm.... Not quite!

[vBR]

Originally posted by *A*
Umm.... Not quite!
To clarify, that last post by 'A' was not made by the 'A' that started this thread but by the '*A*' that I just registered.
After reading this thread I started going through the ASCII table until I found another character that would give the same effect.
I got as far as 0160.
You will have to eliminate the others yourself.

[Kier]

Originally posted by vBR
To clarify, that last post by 'A' was not made by the 'A' that started this thread but by the '*A*' that I just registered.
After reading this thread I started going through the ASCII table until I found another character that would give the same effect.
I got as far as 0160.
You will have to eliminate the others yourself. Okay, try it again now... I think I've sorted out that problem now.

[B]

***

[vBR]

Originally posted by Kier
Okay, try it again now... I think I've sorted out that problem now.
Originally posted by B

I just registered a '*B*' with ASCII 0160 and that character can still be used in titles and posts.
I'll bet there are more codes that'll do the same.

***

[Kier]

Originally posted by vBR
I just registered a '*B*' with ASCII 0160 and that character can still be used in titles and posts.
I'll bet there are more codes that'll do the same. There's not a whole lot we can do about this without breaking double-byte languages, but I've added an admin option that allows the administrator to strip chosen ASCII chars out of usernames etc.

[okrogius]

What would be a nice idea imho is to run the username through a preg_match expression (simply way too many ascii possibilities to cover if just detecting those "bad characters". The actualy expresison could be an option in admincp with some examples such as alphanumeric w/o spaces but w/ underscores or dashes, alphanumeric with spaces.