Modern AAC problem with [ ' ]

[Jonass]

I have Modern AAC rev 244 and in Search Character you find one players with " ' " and website say this: An Error Was Encountered
The URI you submitted has disallowed characters.

Please Help Me.

Thanks.

 

[Runes]

In config.php you will find something similar to this:

$config['engine']['permitted_uri_chars'] = "a-z 0-9~%.:_\-'+";

Just add the quote marks (symbols) you are using.

Example

$config['engine']['permitted_uri_chars'] = "a-z 0-9~%.:_\-'+\\[\\]";

 

[Jonass]

i put in config.php this

$config['engine']['permitted_uri_chars'] = "a-z 0-9~%.:_\-'+\\[\\]";

and look :/
http://necroland.com//index.php/character/view/Puah'lal

 

[Loney]

system/libraries/form_validation.php

function nickname($str)  
        {  
                $a = explode(' ', $str);  
                $error = 0;  
                foreach($a as $b)  
                        if(!preg_match("/^[a-zA-Z]{3}+(([\'\-][a-zA-Z]{2})?[a-zA-Z]*)*$/", $b))  
                                $error++;  
                                  
                return $error ? FALSE : TRUE;  
        }

Replace it with this:

function nickname($str)  
        {  
                $a = explode(' ', $str);  
                $error = 0;  
                foreach($a as $b)  
                        if(!preg_match("/^[a-zA-Z]{3}+(([\-][a-zA-Z]{2})?[a-zA-Z]*)*$/", $b))  
                                $error++;  
                                  
                return $error ? FALSE : TRUE;  
        }

 

[Jonass]

not work :/

Please Help Me!

 

[hodleo]

Didn't this allow some risk of sql injection or smth like that?

 

[Jonass]

I don't know but people don't have this bug :/

This fix is very important.

 

[Jonass]

Bump