Make WordPress Core

Opened 2 years ago

Closed 2 years ago

Last modified 2 years ago

#55211 closed defect (bug) (invalid)

Apostrophe in last name when adding user causes erroneous 403 error

Reported by: ebonweaver's profile ebonweaver Owned by:
Milestone: Priority: normal
Severity: normal Version: 5.9
Component: Users Keywords:
Focuses: Cc:

Description

If you try to create a user with a last name that has an apostrophe (e.g. O'Conner) you get a 403 Forbidden when trying to add the user. Based on searches, this bug has been around for 14 years, but I see no evidence it's ever been reported. Unclear why that character in a user last name would cause such an erroneous security error.

Change History (2)

#1 @clarkenriquez
2 years ago

  • Resolution set to invalid
  • Status changed from new to closed

I've tried replicating this error (adding both first name and last name with the name O'Conner) but it seems it's just working well on my end, maybe you meant another kind of special character for this?

#2 @SergeyBiryukov
2 years ago

  • Milestone Awaiting Review deleted

Hi there, welcome to WordPress Trac! Thanks for the report.

Just noting that I also could not reproduce the issue on a clean install. This sounds like an issue triggered by a plugin or some overzealous security rule on the server.

Some similar issues: #25564, #25736, #32571, #33160, #44861, #45368, #48673, #48698, #49766, #53683.

Note: See TracTickets for help on using tickets.