Author Topic: Lack of validation on first/last/org_name means urls can be entered (Read 331 times)

petednz · June 11, 2014, 06:54:01 pm

Surprised to only just spot this - but a client has a ton of contacts whose first name / last name has web addresses - which would be v embarassing if those contacts were then visible in a listing - which they aren't but i suspect could be the case on others' sites.

is this something that can be addressed?

my colleague points out that names are getting stranger and it may be hard to come up with rules eg to disallow a fullstop - but surely disallowing :// isn't going to hurt real contacts is it?

xavier · June 13, 2014, 07:24:03 am

You are going to loose in predictability what you won't get back in features:
- what if you put the url as www.example.org instead of http://example.org? one will be imported, the other won't
- why should we limit for first and last but not organisation? and then what happens to ":// llc" (subsidiary of ":^) holding"
- can't ever :// be valid as part of a utf-8 character?
...

Civi won't outsmart its users and will end up taking ownership of their mistakes and would become a big bag of magic where things happen differently based on the phase of the moon or the number of slashes in a field.

garbage in, garbage out. Simple, predictable and coherent. the way we like it.

CiviCRM Community Forums (archive)

News:

Author Topic: Lack of validation on first/last/org_name means urls can be entered (Read 331 times)

petednz

Lack of validation on first/last/org_name means urls can be entered

xavier

Re: Lack of validation on first/last/org_name means urls can be entered