Make WordPress Core

Opened 2 years ago

Last modified 2 years ago

#61774 reopened defect (bug)

Error 403 while adding ' to last name on user page

Reported by: gazto Owned by:
Priority: normal Milestone: Awaiting Review
Component: Users Version:
Severity: major Keywords: reporter-feedback
Cc: Focuses:

Description

In the user-edit.php page, while adding a ' (apostrophe) and save it, returns 403 forbidden code.

Change History (4)

#1 @deepakrohilla
2 years ago

usernames don't support apostrophes, while fields such as first name, last name, and email addresses do. According to RFC 3696, apostrophes are valid in email addresses as long as they come before the @ symbol. Therefore, I’m not encountering the same issue you are experiencing on user-edit
Can you look and share more detailhttps://i.ibb.co/sFwLzFN/apostrophe-no-iisue.png

#2 @brobken
2 years ago

  • Keywords reporter-feedback added

#3 @brobken
2 years ago

  • Resolutioninvalid
  • Status newclosed

I've tested the input fields for first name and last name on the following possible apostrophe unicodes:

U+0027
U+02BC
U+055A
U+07F4

With all of them I was able to create a new user and modify an existing user.
E-mailaddresses with the above are possible not supported by RFC 3696.

As @deepakrohilla already mentioned, this is not the case for the username as

Version 0, edited 2 years ago by brobken (next)

#4 @desrosj
2 years ago

  • Component GeneralUsers
  • Resolution invalid
  • Status closedreopened

I'm going to reopen this just to allow a bit of time for @gazto to proved more detail.

I'd specifically like to know which field an apostrophe was being added to in order to replicate the error, and if they're able to reproduce on a fresh install of WordPress.

While conversation can always continue on closed tickets, it's best to leave them open to remain on the radar. When closed, they essentially disappear into the archive.

Note: See TracTickets for help on using tickets.