search

dmeese / MathWorld

Team Bunny Slippers Math World Web Application
0 stars 1 forks source link

usernames are forced to be lowercase & user Db code username/passwd validation #19

Closed ravthan closed 11 years ago

ravthan commented 11 years ago

This makes it easier for a hacker to guess user id. Also in many db .rb modules, checking username validation should be added. Many .rb modules in db package make no effort to do this. So is far password, ravi.

CKinWoodstock commented 11 years ago

Usernames (actually userids) are not coerced to lowercase - they may be mixed case, and they are case sensitive. Validation has been added to enforce stronger passwords (as part of bug #5).

Beyond that, I'm not sure I understand the issue here?

ravthan commented 11 years ago

At the time I was looking at some code/documentation it mentioned that force all the usernames to lower case. That's why I filed this bug, ravi.

CKinWoodstock commented 11 years ago

Documentation no longer shows incorrect behavior of user ids