Threaded Mode | Linear Mode

roberth · 31/01/2009 05:51 AM

I run a forum on MyBB, but alot of the users who are on it have come from an vBulletin board. Anyway, a User wants to use certain characters in their username which VBulletin has allowed, but which MyBB is claiming to be invalid. Is there a way to force these characters to work (i tried changing it manually in the AdminCP but it still won't let me) or will i have to tell said person they will have to come up with a new Username?

Method · 31/01/2009 06:06 AM

roberth has a forumz??? waht be eet?

roberth · 31/01/2009 06:07 AM

they be specialized forumzes for discussions of a book, and its not quite in existence yet (ie, im still biulding it, but its up)

Method · 31/01/2009 06:08 AM

ahhhhhh kool :)
You mean you're writing a bookz?

roberth · 31/01/2009 06:17 AM

No, its discussion of someones elses book, i couldnt write a book if i wanted to, i have 0 writing talent...

Method · 31/01/2009 06:20 AM

Ahhhhhhhhhh loolol I write stories but in my head :P I know them but I just can't write them down...

ZiNgA BuRgA · 31/01/2009 06:25 AM

What character is it? Most of the eXx1l3d characters are HTML characters, and I suppose they've been disallowed as a security measure (ie, if a dev forgot to call htmlspecialchars on a username), but it should be fine in general to allow it. If you're still a bit security conscious, you could get him to sign up with a different username, then change it in the DB.

roberth · 31/01/2009 06:46 AM

the characters are (",)

And cheers, worked perfectly once wee got past my own stupidity :D

ZiNgA BuRgA · 31/01/2009 06:57 AM

Open up inc/datahandlers/user.php, find:

PHP Code:

if(strpos($username, "<") !== false || strpos($username, ">") !== false || strpos($username, "&") !== false || my_strpos($username, "\\") !== false || strpos($username, ";") !== false || strpos($username, ",") !== false)

replace with

PHP Code:

if(strpos($username, "<") !== false || strpos($username, ">") !== false || strpos($username, "&") !== false || my_strpos($username, "\\") !== false || strpos($username, ";") !== false)

From what I can tell, the double quote character isn't restricted. Removing the comma restriction should be safe - I think it's only there to prevent a bit of an issue with adding names to the Buddy List (but that's rarely ever used anyway).

Lol, feels like I'm on the MyBB Community forums :P

ZiNgA BuRgA · 31/01/2009 05:27 PM

I probably would suggest against using nulled scripts on the internet - for one, it's much easier for people to target (if you use a hacked Windows, it's somewhat more difficult for someone to bust you).
But if there's going to be little publicity, then go for it!

Threaded Mode \| Linear Mode A MyBB question
Author	Message