I'm looking for a MOD that restricts Thread Titles to ONLY alpha (a-z (upper/lower)) and/or numeric (0-9) characters. Why? To prevent the creation of potential SQL injection strings.
We use ZB Block on our Forum, and it's been tremendously effective in keeping spam and spammers out. However, many of our members create Thread Titles using error output (as that's the problem they want to address). Sometimes these titles can be seen by ZB Block (via external search (and on rare occasion, internal search) queries, or by Moderator/Administrator merge actions, as SQL Injection attempts.
By restricting Thread Title characters to alpha-numeric only, we avoid this potential problem.
This is what I get if I try to save/edit a post/thread to use a title having non-alphanumeric characters in the title:
I'd have to come to your site with an admin account to figure out why it's not working on your site. SO, if you so desire, send by PM the login credentials to an admin account on your site and I'll see if I can find out why.
Thank you for your assistance, both in making this MOD (Plugin) and for helping to troubleshoot why it isn't working "here".
For others reading this, I tested this MOD using Apple's Safari browser on my iMac running macOS Sierra (latest/greatest, fully up to date). Using Safari, Thread Titles allows non-alphanumeric characters. But, using Firefox on my Linux OS laptop, this MOD works as designed.
So, Safari chooses 'not to play well with others' it seems.
Yes, Safari is one of a few browsers that don't yet support form validation it seems. So, I'll add a fallback method of some sort and post back when I have something for you to test.
12-21-2016, 08:13 PM
Restrict Thread Titles to Alpha-Numeric only
Linear Mode
