[Clipart] Fwd: [Bug 689839] Re: internet explorer save button not working

[J. Alves]

Oops! That's potentially not a good sign -- could an SQL injection
also be done that way? Would it matter (e.g. if OCAL does not have
sensitive data)?

Never trust user input, it all should be sanitized. Not sure if this
would solve it, but using the PHP function ctype_alnum($text) could be
a way to do it. Like (pseudocode, I don't know PHP syntax...yet):

if ctype_alnum($username) { accept input }
else { do not save input; go back to profile editing page with a
message complaining that username can only contain letters }

Actually this probably should be made into a subroutine, since it
should be used for all user text input. And then you just repeatedly
call, say validate_text($text) and the sub takes it from there.

I don't know if this would work with non-ASCII characters though,
stuff like ã, ü, ß, etc. or completely different alphabets like
Chinese or Cyrillic. Would have to be tested.

Cheers
J

On Sat, Feb 19, 2011 at 4:15 AM, Piers Haken <piersh at hotmail.com> wrote:
> Try setting your Full Name to:
>
>        <iframe src="/" />
>
> Hilarity ensues.
>
> Piers.
>
> -----Original Message-----
> From: clipart-bounces+piersh=hotmail.com at lists.freedesktop.org
> [mailto:clipart-bounces+piersh=hotmail.com at lists.freedesktop.org] On Behalf Of
> Piers Haken
> Sent: Friday, February 18, 2011 3:39 PM
> To: 'Open Clip Art Library PUBLIC'
> Subject: Re: [Clipart] Fwd: [Bug 689839] Re: internet explorer save button not
> working
>
> var htmldata = $("#557389homepage textarea").val(); var originaldata =
> $("#557389homepage textarea").text(); if (htmldata != originaldata) {
>        // in IE these are NEVER different
>        // this code NEVER gets run
> }
>
>
> Piers.
>
> -----Original Message-----
> From: clipart-bounces+piersh=hotmail.com at lists.freedesktop.org
> [mailto:clipart-bounces+piersh=hotmail.com at lists.freedesktop.org] On Behalf Of
> jon at rejon.org
> Sent: Friday, February 18, 2011 12:17 PM
> To: Open Clip Art Library PUBLIC
> Subject: [Clipart] Fwd: [Bug 689839] Re: internet explorer save button not
> working
>
> we need someone with internet explorer and who wants to help with aiki to help
> fix internet explorer and browser bugs.
>
> Anyone want to step up to the plate?
>
> fabricatorz use linux.
>
> Jon
>
>
> ---------- Forwarded message ----------
> From: chovynz <689839 at bugs.launchpad.net>
> Date: Fri, Feb 18, 2011 at 2:05 PM
> Subject: [Bug 689839] Re: internet explorer save button not working
> To: jon at rejon.org
>
>
> I don't know how to, or what to look for. My time is better spent elsewhere.
> Changing to openclipart.devel assignee
>
> ** Changed in: openclipart
>    Assignee: chovynz (chovynz) => openclipart.devel (openclipart.devel)
>
> --
> You received this bug notification because you are a member of
> openclipart.devel, which is a bug assignee.
> https://bugs.launchpad.net/bugs/689839
>
> Title:
>  internet explorer save button not working
>
>
>
> --
> Jon Phillips
> http://rejon.org/ | http://fabricatorz.com/
> chat/skype: kidproto | irc: rejon
> +1.415.830.3884 (global) | +1-510-499-0894 (sf)
> _______________________________________________
> clipart mailing list
> clipart at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/clipart
>
> _______________________________________________
> clipart mailing list
> clipart at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/clipart
>
>



-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
João Marcelo Pereira Alves (J) - Genomics, Molecular Phylogeny and Evolution
Dept. Microbiology & Immunology - MCV/VCU - Richmond, VA, USA
f. 1-804-828-3897 / 804-852-1234 - http://bioinfo.lpb.mic.vcu.edu