If you use plugin AddUsersNotes and you set the "guest" usernote with an single quote, you won't be able to add any new user correctly. Indeed, in function create_user_infos we simply copy fields from user "guest" to the new user, without protecting string values.
If you use plugin AddUsersNotes and you set the "guest" usernote with an single quote, you won't be able to add any new user correctly. Indeed, in function `create_user_infos` we simply copy fields from user "guest" to the new user, without protecting string values.
<!-- github-sync-id:397846990 -->
Yes, maybe the default user, you're right. It won't really change the fix to apply, because in function create_user_infos we simply get the default user_infos values from function get_default_user_info
Yes, maybe the default user, you're right. It won't really change the fix to apply, because in function `create_user_infos` we simply get the default user_infos values from function `get_default_user_info`
<!-- github-comment-id:453447400 -->
I'm not sure this is related but there are 5 users with a different user_list issue where the users are in the database but can't be displayed on the admin user_list page: https://github.com/Piwigo/Piwigo/issues/882
I'm not sure this is related but there are 5 users with a different user_list issue where the users are *in* the database but can't be displayed on the admin user_list page:
https://github.com/Piwigo/Piwigo/issues/882
<!-- github-comment-id:453981421 -->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
If you use plugin AddUsersNotes and you set the "guest" usernote with an single quote, you won't be able to add any new user correctly. Indeed, in function
create_user_infoswe simply copy fields from user "guest" to the new user, without protecting string values.Default user ? no ?
Yes, maybe the default user, you're right. It won't really change the fix to apply, because in function
create_user_infoswe simply get the default user_infos values from functionget_default_user_infoI'm not sure this is related but there are 5 users with a different user_list issue where the users are in the database but can't be displayed on the admin user_list page:
https://github.com/Piwigo/Piwigo/issues/882