Fix for bug 93388: Full name should be trimmed of whitespace before going

into database.

r1=Zach Lipton <zach@zachlipton.com> r2=Andreas Franke
<afranke@ags.uni-sb.de>. Patch by Christopher Aillon
<caillon@returnzero.com>.

diff --git a/createaccount.cgi b/createaccount.cgi
index 5b9bfb9f6a19bd253d154818b434f5b302aaa0ed..3bf7f51b4c63776e7d80b76c6828b043e6a683cd 100755 (executable)
--- a/createaccount.cgi
+++ b/createaccount.cgi
@@ -21,6 +21,7 @@
 # Contributor(s): Terry Weissman <terry@mozilla.org>
 #                 David Gardiner <david.gardiner@unisa.edu.au>
 #                 Joe Robins <jmrobins@tgix.com>
+#                 Christopher Aillon <christopher@aillon.com>
 
 use diagnostics;
 use strict;
@@ -53,7 +54,7 @@ if(Param('useLDAP')) {
 }
 
 my $login = $::FORM{'login'};
-my $realname = $::FORM{'realname'};
+my $realname = trim($::FORM{'realname'});
 if (defined $login) {
     CheckEmailSyntax($login);
     if (DBname_to_id($login) != 0) {

diff --git a/userprefs.cgi b/userprefs.cgi
index 0eeda0e71009f929a4915d28c0d417feb6b1cd8f..4e73ec3a9cd946b49fbb8b9ba8f4017a5b3d7820 100755 (executable)
--- a/userprefs.cgi
+++ b/userprefs.cgi
@@ -17,7 +17,7 @@
 #                 Dan Mosedale <dmose@mozilla.org>
 #                 Alan Raetz <al_raetz@yahoo.com>
 #                 David Miller <justdave@syndicomm.com>
-#
+#                 Christopher Aillon <christopher@aillon.com>
 
 use diagnostics;
 use strict;
@@ -171,7 +171,7 @@ sub SaveAccount {
                  WHERE   userid = $userid");
     }
     SendSQL("UPDATE profiles SET " .
-            "realname = " . SqlQuote($::FORM{'realname'}) .
+            "realname = " . SqlQuote(trim($::FORM{'realname'})) .
             " WHERE userid = $userid");
 }