Re: Forbidden characters of Item code input

null@example.com (apmuthu) — Mon, 25 Dec 2017 14:47:36 +0000

The user input control functions that provide the dropdown select box php code should not get confused and the search delimiters should not be ambiguous. URL encoding too will convert space to "+".

We can also add the back tick character to the forbidden list it as well - "`". A semicolon too may be added to the list.

Here is an elegant way to check a string for presence of any character in an array:

$arrayOfBadCharacters =array(' ', "'", '"', '+', '&', chr(9), chr(10), chr(13), '`', ';');
$chars = preg_quote(implode('', $arrayOfBadCharacters));
if(preg_match('/['.$chars.']/', $_POST['NewStockID']) {
    // bad character(s) found
}

These bad characters may be stripped off and the code used instead of throwing an error.

Forbidden characters of Item code input

null@example.com (notrinos) — Mon, 25 Dec 2017 13:07:19 +0000

Line 182 of inventory/manage/items.php should be

elseif (strstr($_POST['NewStockID'], "-") || strstr($_POST['NewStockID'],"'") ||

to prevent the - symbol entered by user
Can someone explain about the forbidden characters in the Item code (- ' " + & space), is the reason security ?

FrontAccounting forum — Forbidden characters of Item code input

Re: Forbidden characters of Item code input

Forbidden characters of Item code input