Joomla! Discussion Forums

Description:
Fine tuning check to the 'site name' text field sanitizing mechanism as it prevent the use of quoted inoffensive site names.

Reported on:
Nightly Build 2007-09-13

Affected functions:
Installation script

Steps to replicate:
-Run installation script
-Choose as 'site name' any quoted inoffensive string, like "hello world"
-Proceed to complete installation process
-Check site name after first administration login (Global Configuration). Please note that '\' only appear on the text field; also check the site name displayed on browser.
-Edit site name to "hello world" again and save changes.
-Check browser title bar: "hello world"

System info:
Database Version: 5.0.45-log
Database Collation: utf8_general_ci
PHP Version: 5.1.4
Web Server: Apache
Web Server to PHP interface: cgi-fcgi
Joomla! Version: Joomla! 1.5.0 Production/Stable [ Endeleo ] 1-September-2007 15:00 GMT
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6

Confirmed.  HTML comes up something like the following.


The sitename is stored in the database configuration.php as expected, however.  This seems to be a rendering issue.

tcp

--edit

Tracked down the issues of quotes to JSite::getParams() ( line 226 ). 



In the configuration registry ( use JFactory::getConfig() ) the site name is encoded already.


I'm assuming that this is the expected behavior.  The title is later assigned to the document in JSite::dispatch ( line 121 ).


One possible solution is to decode the page title before it is assigned to the document.

tcp

Q&T; marking as confirmed.