Uploaded image for project: 'phpBB'
  1. phpBB
  2. PHPBB-3587

username not html decoded in search

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • 3.0.0
    • 3.0.x
    • Other
    • None
    • PHP Environment:
      Database:

      I experienced this on phpBB.com only, as this is the only board, that's using phpBB3, and i'm using the '<' character in my username. When doing an egosearch, the pagination links to the username, like this:

      http://www.phpbb.com/community/search.php?st=0&sk=t&sd=d&sr=topics&author=eviL%26lt%3B3&start=25

      The problem is, that my username contains html, wich - with htmlspecialchars applied to the username - results in < being converted to %26lt%.

      Possible solution:
      In search.php, find:

      	$u_search .= ($author) ? '&amp;author=' . urlencode($author) : '';

      Replace:

      	$u_search .= ($author) ? '&amp;author=' . urlencode(htmlspecialchars_decode($author)) : '';

            naderman Nils Adermann
            igorw Igor Wiedler [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: