Web Wiz Forums - usernames

Print Page | Close Window

usernames

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=9941
Printed Date: 08 April 2026 at 5:02am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: usernames

Posted By: fireau
Subject: usernames
Date Posted: 10 April 2004 at 11:51am

This is an issue we have encountered.

It is posiible to make 2 usernames to be displayed the same way. Example I could register 2 usernames like this:

[fireau] as the first one
[fireau] as the second one.

And they would both display as [fireau]
Maybe the username should have the decodestring function applied to it before a check is made to whether it exists or not.

Replies:

Posted By: michael
Date Posted: 10 April 2004 at 12:19pm

I don't really see the purpose of this but with code changes it would be possible to do so. If that is a thing you only want to do for one user you could also do it directly in the database, changing the code may be risky security wise...

-------------
http://baumannphoto.com" rel="nofollow - Blog | http://mpgtracker.com" rel="nofollow - MPG Tracker

Posted By: fireau
Date Posted: 10 April 2004 at 12:31pm

There are several reasons to stop this, the least of them is confusion. We have had some users that did this, and tried to post as the original user.

I dont see the security issue in changing the code,.
Usernames get filtered prior to being checked if it exists in the database. All is required is to use decodestring(username) is the sql statement that checks if it exists in the db.