Endless Paradigm

Full Version: A MyBB question
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2
I run a forum on MyBB, but alot of the users who are on it have come from an vBulletin board. Anyway, a User wants to use certain characters in their username which VBulletin has allowed, but which MyBB is claiming to be invalid. Is there a way to force these characters to work (i tried changing it manually in the AdminCP but it still won't let me) or will i have to tell said person they will have to come up with a new Username?
roberth has a forumz??? waht be eet?
they be specialized forumzes for discussions of a book, and its not quite in existence yet (ie, im still biulding it, but its up)
ahhhhhh kool :)
You mean you're writing a bookz?
No, its discussion of someones elses book, i couldnt write a book if i wanted to, i have 0 writing talent...
Ahhhhhhhhhh loolol I write stories but in my head :P I know them but I just can't write them down...
What character is it?  Most of the eXx1l3d characters are HTML characters, and I suppose they've been disallowed as a security measure (ie, if a dev forgot to call htmlspecialchars on a username), but it should be fine in general to allow it.  If you're still a bit security conscious, you could get him to sign up with a different username, then change it in the DB.
the characters are (",)



And cheers, worked perfectly once wee got past my own stupidity :D
Open up inc/datahandlers/user.php, find:

PHP Code:
if(strpos($username, "<") !== false || strpos($username, ">") !== false || strpos($username, "&") !== false || my_strpos($username, "\\") !== false || strpos($username, ";") !== false || strpos($username, ",") !== false)

replace with

PHP Code:
if(strpos($username, "<") !== false || strpos($username, ">") !== false || strpos($username, "&") !== false || my_strpos($username, "\\") !== false || strpos($username, ";") !== false)


From what I can tell, the double quote character isn't restricted.  Removing the comma restriction should be safe - I think it's only there to prevent a bit of an issue with adding names to the Buddy List (but that's rarely ever used anyway).


Lol, feels like I'm on the MyBB Community forums :P
I probably would suggest against using nulled scripts on the internet - for one, it's much easier for people to target (if you use a hacked Windows, it's somewhat more difficult for someone to bust you).
But if there's going to be little publicity, then go for it!
Pages: 1 2
Reference URL's