Ticket #1532 (closed Bugs: duplicate)

Opened 2 years ago

Last modified 2 years ago

Can't use apostrophe in Display Name field

Reported by: djelibeybi Assigned to:
Priority: trivial Milestone: 2.3
Component: Core - Users/Devices Version: SVN-HEAD
Keywords: Cc:
Confirmation: SVN Revision (if applicable):
Backend Engine: All Backend Engine Version:

Description

If you try entering a name like "Patrick O'Toole" in the Display Name field, FreePBX complains about not having an outbound CID configured. However, if you remove the apostrophe, it works fine.

Change History

12/13/06 15:42:53 changed by p_lindheimer

hmm - is an "'" a supported CID character? can someone test that and see if handsets can receive and apostrophe?

12/13/06 15:47:36 changed by p_lindheimer

  • priority changed from minor to trivial.
  • milestone set to 2.2.

Ok - I tried by putting it straight into the astdb field, looks like both my polycom as well as a panasonic phone I have connected to a Sipura ata have no problem receiving the "'" so ... guess it should be fixed (eventually)

12/13/06 16:33:37 changed by naftali5

yes, the script does not let '

/var/www/html/admin/common/script.js.php

function isCallerIDChar (c)
{   return ( ((c >= "a") && (c <= "z")) || ((c >= "A") && (c <= "Z")) || ((c >= "0") && (c <= "9")) || (c == ":") || (c == "_") || (c == "-") || (c == "<") || (c == ">") || (c == "(") || (c == ")") || (c == " ") || (c == "\"") || (c == "&") || (c == "@") || (c == ".") )
}

12/13/06 16:41:06 changed by naftali5

besides, the message is wrong...

line 2331 of my version of core's functions.include.php

$currentcomponent->addguielem($section, new gui_textbox('name', $name, 'Display Name', 'The caller id name for calls from this user will be set to this name. Only enter the name, NOT the number.', '!isCallerID()', $msgInvalidOutboundCID, false));

should be using

$msgInvalidDispName = 'Please enter a valid Display Name';

not

$msgInvalidOutboundCID = 'Please enter a valid Outbound CID';

01/02/07 09:31:21 changed by gregmac

Please check for proper escaping in queries that use this field before making this change, otherwise we will run into sql errors

01/02/07 17:32:31 changed by RobThomas

  • version changed from 2.2rc1 to SVN-HEAD.
  • milestone changed from 2.2 to 2.3.

The incorrect error being displayed is fixed, but allowing users to use ' in names won't be fixed for a while yet, possibly until 3.0, to avoid SQL injection errors.

01/08/07 11:46:49 changed by

  • milestone deleted.

Milestone 2.3 deleted

01/08/07 12:04:09 changed by vgster

  • milestone set to 2.3.

05/25/07 02:47:14 changed by lazytt

  • status changed from new to closed.
  • resolution set to duplicate.
  • engine_version changed.
  • svn_rev changed.

Dup of #1955

Donate



Support
Download
Develop
Forums
News
Documentation
Paid Support
About

Paid Ads