XF 2.2 Connection with a username containing accents

[Nicolas FR]

Hello,

I created a user named Éméché
but I can connect using the username without an accent : Emeche

Wouldn't that be a bug ? And a slight security breach ?

 

[Chris D]

MySQL is typically accent insensitive so É and E are essentially the same letter. So this is expected.

No, it wouldn't be a security breach because if Emeche already exists, you wouldn't then be able to create Éméché. Éméché and Emeche cannot both exist in the same table because usernames are unique and those two names are considered identical.

 

[Nicolas FR]

Ok, i understand. Thanks.