FS#2849 problem with uppercase letters in usernames

ACL & Authentication

• 

  2013-09-18 IngoF

  if I use uppercase letters in usernames i can register. The registration mail contains only lowercase letters. But the user must enter the lowercase letters.
  
  if the user registers himself this must not be a problem. But if the administartor registers the user with uppercase letters in username the user can not login with the information of the notification mail.
  
  the
  
  Solution:
  accept only lowwercase letter for usernames. it seems that only usernames in lowercase are handled inside dokuwiki. (Example "last changes" in dokuwiki)
• 

  2013-09-21 Klap-in

  The usermanager does sometimes the assumptions that an userid always fits into DokuWikis page name convention.      
  e.g. $olduser = cleanID(preg_replace('/.*:/','',$INPUT->str('userid_old')));
  
  While each auth backend has its own $auth->cleanUser() function.
  
  When creating a new user only the $auth->cleanUser() is used. So the parts of the usermanager that use the cleanID() will break for names cleaned by $auth->cleanUser that don't follow the DokuWiki pagename convention.
  
   
• 

  2013-09-21 Klap-in

  https://github.com/splitbrain/dokuwiki/pull/348 apply always cleanUser in commit 786dfb0.
  
  
• 

  2013-09-21 Klap-in

  https://github.com/splitbrain/dokuwiki/pull/348 apply always cleanUser in commit 786dfb0.
  
  
• 

  2013-09-22 IngoF

  I tried again. Seems there is no problem. I saw in the log that the first login of some users failed the first time. The second try was OK.
  The I tried a user with uppercase letters and it failed three times at login.
  
  I think i made three times a tiping error.
  
  Sorry about that.
• 

  2013-10-26 Klap-in

  Fixed with improving User Manager by using $auth->cleanUser()