Decay
radio_button_checked
Too weird to live, too rare to die.
Posts: 862
Threads: 53
Likes Given: 762
Likes Recieved: 784 in 352 posts
Joined: Aug 2015
Reputation:
25
|
Dec 28, 2015, 06:02 PM
So I've been wondering for ages now: Why aren't we allowed to have single or double quotes in our steam name ( ' ) ? lol
|
|
Burnett
radio_button_checked
Security Officer, CityRP2 Core Developer
Posts: 3,223
Threads: 201
Likes Given: 1418
Likes Recieved: 3275 in 971 posts
Joined: Aug 2015
Reputation:
45
|
Dec 28, 2015, 07:39 PM
Quotes arent allowed due to security of the database (mysql). One could easily change their name to match an injection-statement such as database-removal etc.
Even if db query-calls are escaped, it's better not to allow quotes at all as they can be used to inject a similiar script/system.
If you have questions regarding Limelight Gaming's security, infrastructure or backend related topics,
feel free to contact me directly via Discord or PM.
Please note that confidential information cannot be disclosed.
Burnett
(This post was last modified: Dec 28, 2015, 07:42 PM by Burnett.)
|
|
Decay
radio_button_checked
Too weird to live, too rare to die.
Posts: 862
Threads: 53
Likes Given: 762
Likes Recieved: 784 in 352 posts
Joined: Aug 2015
Reputation:
25
|
Dec 28, 2015, 07:46 PM
ooh makes sense, thanks 
|
|
Burnett
radio_button_checked
Security Officer, CityRP2 Core Developer
Posts: 3,223
Threads: 201
Likes Given: 1418
Likes Recieved: 3275 in 971 posts
Joined: Aug 2015
Reputation:
45
|
Dec 28, 2015, 08:12 PM
You're welcome! 
If you have questions regarding Limelight Gaming's security, infrastructure or backend related topics,
feel free to contact me directly via Discord or PM.
Please note that confidential information cannot be disclosed.
Burnett
|
|
