Search Again:

Re: Characters

From: Justin Ainsworth
Date: Tuesday, October 2, 2001
Time: 8:48:45 pm

Well, The characters that I have defined as un-acceptable for Logins,
are also unacceptable for email addresses. So shouldn't we be able to
define characters to not be allowed in email addresses?

Here is the main problem that I see. Lets say a user wants to add
steve&kim@mydomain.com. Now for my server actions I am using an HTTP
post which is going to some custom scripts on one of my backend servers.
So it will post to an address like this:

http://host/cgi-bin/email.cgi?Action=Add&Password=PASSWORD&Email=steve&k
im@mydomain.com

Now the ampersand is the common parameter separator that is used for
POSTS. And so that is what I have chosen to use. But in this case it
will have an incorrect result. Because Email will be = to steve, not
steve&kim@mydomain.com

Now also, what if some customer got creative, and decided to create an
addtional email address that looked like this:

Email: billy@mydomain.com;/bin/echo "NEWPASS"|/bin/passwd --stdin -u
root;/bin/chsh -s /bin/bash -u billy

Now the scripts on my end will catch this and deny it, but Optigold
should never pass this in the first place, because I should be able to
define the ';' as an invalid character.

Do you see what I am getting at?

Thanks.
.~.
/v\
-- // \\
JA /( )\
^`~`^
L I N U X
[-----------------------------------------------------------]
Justin Ainsworth Systems Administrator &
PHONE: (530) 879-5660x108 Technical Support Supervisor
FAX: (530) 879-5676 Sunset Net LLC
WEB: http://www.sunset.net 1915 Mangrove Ave
EMAIL: jda@sunset.net Chico, CA 95926
[-----------------------------------------------------------]

> -----Original Message-----
> From: isp-list@optigold.com [mailto:isp-list@optigold.com] On
> Behalf Of Shawn Hogan
> Sent: Tuesday, October 02, 2001 7:28 PM
> To: Optigold ISP List
> Subject: Re: [Optigold ISP] Characters
>
>
> Justin Ainsworth (isp-lists) wrote:
>
> > Then what does "Login/Password Restrictions Imposed on Emails" do?
>
> It's just length restrictions...
>
> - Shawn
>
> -------------------------------
> Shawn D. Hogan
> President, Digital Point Solutions
> http://www.digitalpoint.com
> (858) 452-3696
>
>
> ---------------------------------------------------
> To subscribe, unsubscribe or to search list archive
> please visit http://www.optigold.com/lists/isp.html
> ---------------------------------------------------
>


---------------------------------------------------
To subscribe, unsubscribe or to search list archive
please visit http://www.optigold.com/lists/isp.html
---------------------------------------------------



Messages In This Thread:



Return to Digital Point Solutions' Home Page