TYPO3 9.5.x feuser with uppercase letters - settings

I want to allow upper case letters for frontendusers in TYPO3 9.5.x.
When a new feuser self-registers via sfregister_form, it works, but when I add a feuser in the backend, the username gets converted to only lowercase letters.
I found solutions here in the forum https://www.typo3.net/forum/thematik/zeige/thema/47903/ how to (propably) change it, but they only work in older versions of TYPO3. Since there has been lot of changes in TYPO3 since the 10 years old post and I found nothing that talks about TYPO3 9.5.x I ask the question here.

By default username field has set lower eval among others, the fast solution is rewriting it, i.e. if you have some own extension you can add this to its ext_table.php or Configuration/TCA/Overrides/fe_users.php
$GLOBALS['TCA']['fe_users']['columns']['username']['config']['eval'] = 'nospace,trim,uniqueInPid,required';
Note: you can do it within two files, and nowadays the second is more advised
Note 2: Since TYPO3 ver 7.3 typo3conf/extTables.php is deprecated https://docs.typo3.org/c/typo3/cms-core/master/en-us/Changelog/7.3/Deprecation-65344-ExtTables.html
typo3conf/ext/yourext/ext_tables.php
typo3conf/ext/yourext/Configuration/TCA/Overrides/fe_users.php
Works with 9.5.x as shown on screenshots:

Related

indexing not reliable on WindowCollection

I have upgraded to recent WATIR(7.0.0.beta5) and when I am executing the following line
#browser.windows.last.use
I am getting this error
"indexing not reliable on WindowCollection"
This was working fine in my previous WATIR version(6.19.1). What is the issue?
Another question is, It looks like there are plenty of changes of capabilities. Do I have to set page_load_timeout and read_timeout separately now? and also I have read open_timeout, I don't know what it is for, Can someone help me understand what it is?
Drivers are not guaranteed to always return windows in the same order, so it has been decided to deprecate accessing windows based on their index (ie position in the Array of windows). You have a couple of options.
Working with 2 windows
If you are only working with 2 windows (probably most cases), the recommendation is to use 2 new methods:
# Switch to the second window that was opened
browser.switch_window
# Return to the first window
browser.original_window
Working with 3+ windows
The best approach would be to locate the window you want based on known properties:
# By url
browser.window(url: /closeable\.html/).use
# By title
browser.window(title: 'closeable window').use
# By an element in the window (new)
browser.window(element: browser.a(id: 'close')).use
(Not Recommended) By index
This is not recommended, but if you insist on using index, you can cheat by forcing the WindowsCollection to an Array:
browser.windows.each.to_a.last

Table of contents in markdown for Nikola

I've been using Sphinx for my personal website for the past years and realized that I more have a blog with posts and few pages and did the conversion to Nikola in the past days. I also took the opportunity to switch to Markdown as I use it with R and Stack Overflow and everywhere else as well.
I have set in my Sphinx theme to have a local table of contents in the sidebar. There are a handful of very long (over 10k words) posts that would benefit from a local table of contents. I saw that the Nikola manual is written in reST and uses the contents directive. I would like to use that also in those posts.
I could convert these few posts back to reST and use the contents directive, but I'd like to avoid that. Can this be accomplished somehow?
Nikola uses Python-Markdown by default. It supports a TOC extension that one can enable in the conf.py. Then one can use a [TOC] marker anywhere in the document to get a local table of contents.
Updated
Using [TOC] which is a feature of an extension enabled by default. My firts answer was an misinterpretation of your question.
Firts answer
Using Nikola, may be you are interested in "archive" option. This is a default page that include all your posts (optional, this is grouped by date). Example in my blog: https://www.cosmoscalibur.com/archive.html .

magento top searches - trailing slashes

“5 Most Recent Searches” and popular searches page is full of search terms that have “slashes” appended to them:
’{search_term}’, ’{search_term}/’, \’{search_term}//’ ... ’{search_term}///////////////////////’
does anyone know if its a Magento bug?
any idea what may cause this problem?
I'm using Magento 1.7
We are running a number of shops on v 1.7 and never encounter such issue. My guess is that some crawler attacks your search form with a list of poorly generated searches.
I don't really know why my previous post with solution was deleted, but anyway... This is problem with web crawler. Try to find which one is messing your search function in your store and try to block it.

More flexible SEO URLs in OSCommerce?

New OScommerce user.
I've been fiddling around with Chemo's Ultimate SEO add-on the last few days. I've mostly got it working (minus one bizarre redirect loop for category pages?) but I'm a little disappointed in the limited options for formatting URLs.
I'm seeing:
http://www.website.com/category-awesomeproduct-p-1735.html
When we'd really like to do something more in line with:
http://www.website.com/category/awesomeproduct
What are my options? Am I out of luck?
I fear that the stock URL parameters are rigidly defined and that there's no way to hide the less friendly ones.
After researching this for quite awhile, and receiving no answers here, I believe the answer is: no
The view controller expects that data and it can't be omitted, even with customizations installed.

HTTP response splitting

I'm trying to handle this possible exploit and wondering what is the best way to do it? should i use apache's common-validator and create a list of known allowed symbols and use that?
From the wikipedia article:
The generic solution is to URL-encode strings before inclusion into HTTP headers such as Location or Set-Cookie.
Typical examples of sanitization include casting to integer, or aggressive regular expression replacement. It is worth noting that although this is not a PHP specific problem, the PHP interpreter contains protection against this attack since version 4.4.2 and 5.1.2.
Edit
im tied into using jsp's with java actions!
There don't appear to be any JSP-based protections for this attack vector - many descriptions on the web assume asp or php, but this link describes a fairly platform-neutral way to approach the problem (jsp used as an incidental example in it).
Basically your first step is to indentify the potentially hazardous characters (CRs, LFs, etc) and then to remove them. I'm afraid this about as robust a solution as you can hope for!
Solution
Validate input. Remove CRs and LFs (and all other hazardous characters) before embedding data into any HTTP response headers, particularly when setting cookies and redirecting. It is possible to use third party products to defend against CR/LF injection, and to test for existence of such security holes before application deployment.
Use PHP? ;)
According to Wikipedia and the PHP CHANGELOG, PHP's had protection against it in PHP4 since 4.4.2 and PHP5 since 5.1.2.
Only skimmed it -- but, this might help. His examples are written in JSP.
ok, well casting to an int is not much use when reading strings, also using regex in every action which recieves input from browser could be messy, im looking for a more robust solution

Resources