Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[roseway]

If you include certain punctuation marks (such as an apostrophe) in a sig, the forum adds backslashes in front of the mark and if you remove them the forum software puts them back. I've noticed this on other forums, so it's not unique to this one. Is there a way to get round this little problemette?

[admin]

test

[kitz]

Seems to be a problem with the formatting.

I've even tried using the ascii / html character, yet it still puts in the trailing backslash

[roseway]

The backslash is often used in Linux command lines as an escape character, to include characters which otherwise could confuse the command. For example, if a filename has a space in it, this might be seen as a separator instead of part of the file name, so you can either put the filename in quotes, or you can precede the space with a backslash. I wonder if it's something like that which is being done here.

[admin]

Yep.

When coding you use the / as an escape character. 
The ' character is also used to surround commands to the SQL server for queries, so I'm wondering if its some sort of security feature to stop malicious code being accepted in signature links, as the / ensure's that its treated as text.
Im still playing to see if I can find a way round it..

[kitz]

Whilst not a perfect solution, it may be a workaround to use the ` character

Code: [Select]

`


[admin]

Which although not perfect - it does look better than previously.

Test

It`s a test signature

[kitz]

... or this one is even better

Code: [Select]

´


-----------------------------------
The following text entered into the signature box

Code: [Select]

It´s a test signaturewill output

Itīs a test signature

[roseway]

The last one looks good. (I've never been a fan of the backtick ` used as an apostrophe.)

[mr_chris]

I presume the forum is escaping the single quote with a backslash character. This is to block a simple route to SQL injection attacks.

However, looks like the part of code that fetches the signature from the database, needs to unescape the retrieved text in order to remove backslashes before the sig is displayed, and isn't doing.

Or perhaps it's getting escaped twice and only unescaped once. Don't know without looking at it. Like I say, I'll get onto this after tomorrow