Ask Robert’); DROP TABLE Students; 's mum how it went.
Ah, little Bobby Tables we call him
I have an apostrophe and it’s super annoying as some companies see it as a SQL injection hack and sanitize it.
So I’ve received ID with Mc%20dole or they add a space in it. Or I’ll get a work email with an apostrophe but I cant use it anywhere because sites have it disabled. And I’ve missed my flight because I changed my ticket once to add the apostrophe and the system just broke at the gate.
Worse yet many flight companies have “you will not be able to board if your ID doesn’t exactly reflect your details” but their form doesn’t allow it. Even most forms for card payments don’t allow it even though it’s the name on my card.
%20 is encoded space if I remember right, so even then they were already incorrect
It sounds like maybe they sanitized the apostrophe to a space and then encoded it
Yep, the apostrophe would be %27
So Mc%27dole
I have an apostrophe and it’s super annoying as some companies see it as a SQL injection hack and sanitize it.
My surname contains a character that’s only present in the Polish alphabet. Writing my full name as is broke lots of systems, encoding, printed paperwork and even British naturalisation application on Home Office website. My surname was part of my username back at uni, and everytime I tried to login on Windows, it would crash underlying LDAP server, logging everyone in the classroom out and forcing ICT to restart the server.
everytime I tried to login on Windows, it would crash underlying LDAP server, logging everyone in the classroom out and forcing ICT to restart the server.
Now that’s the way to do it! Make it everybody’s problem, not just yours.
Always worth posting this classic.
There’s also the version with examples if you want to know exactly what and why it breaks.
And the git that collects all of these in one place, if you want to really nerd out.
Also relevant: https://www.wired.com/2015/11/null/
This is going to be bobby tables isn’t it?
Edit: It wasn’t?!
Lol I went through the exact same process.
Been there, seen that, had to deal with it. Now add the problem that there are people who don’t know their birth date or not even the f-ing year they were born in. And I’m not talking about someone from a lost tribe at the Amazonas.
you will not be able to board if your ID doesn’t exactly reflect your details"
Do they care about an apostrophe though? I can see any punctuation being a problem for systems.
I had to convince people to let me on board a plane because my name contain a swedish letter (å). Their computer system translated it into “aa”, which then didn’t match my passport.
That one I can actually see, having an extra letter that doesn’t match. Dropped punctuation or symbols (whatever the flair is called) though personally I wouldn’t care.
That’s the wrong way of looking at an å.
It’s not just an a with decoration. It actually has different pronunciation and is typically replaced with aa if no å is available. (I’m neither Swedish nor Norwegian, so not 100% sure, but it’s what happened to Erling Haaland).
Similarly, you would replace a German ä with ae. So if my name was Bäcker, it would be wrong to spell it Backer on a ticket. Baecker would be the way.
Yes I’m aware it’s not an a with decoration jfc. I’m saying for computer entries that garble things, I wouldn’t care about matching it up so perfectly (with dropped whatever those things are called) as to not allow someone to board a plane.
Your name is transliterated in your passport? That’s on the Swedish authorities then.
No, my passport has my real name of course, with “å”. In the airport system and on the boarding pass my name was spelled with “aa”.
I’m amazed that none of your family members have run into the same problem. If I were you I would compare passports with my family.
Same shit with American custom forms. On the one hand, they threaten you with Armageddon if you fill out the form incorrectly, on the other hand, they only allow plain letters, numbers, and a handful of special characters. Nobody there has the capacity of the mind that maybe a name cannot be correctly represented with that tiny subset of characters. So it is simply impossible to fill out that form without breaking the law. And it is a customs form, so they should know that people filling it out are most likely foreigners.
I have an apostrophe
Scottish/Irish?
some companies see it as a SQL injection hack and sanitize it.
Which kind of apostrophe?
A straight apostrophe, fine - that can and does get used in valid SQL injection attacks. I would be disgusted at any input form that didn’t sanitize that.
But a curly apostrophe? Nothing should be filtering a curly apostrophe, as it has no function or use within SQL. So if you learn how to bring that up in alt codes (Windows, specifically), Key combos (Mac) or dead keys (Linux), as well as direct Unicode codes for most any Win/Mac/*Nix platform, you should be golden.
Unless the developer of that input form was a complete moron and made extra-tight validation.
Plus, knowing the inputs for a lot of extended UTF-8 characters not found on a normal keyboard is also a wee bit of a typing superpower.
… why are you putting an apostrophe in McDole? The O-apostrophe in Irish names is an anglicisation of Ó, eg. Ó Briain becomes O’Brien. Mac Dól would become MacDole/McDole.
Yeah fuck this guy for spelling his name the way it was given to him what an asshole
Probably some bureaucrat decades ago making an incorrect assumption that passed down through generations. Happened to my family. No Irish roots whatsoever, yet somehow we ended up with the annoying form-breaking apostrophe in our ‘legal’ name just because it begins with the letter ‘o’.
“Oscar??? Surely, you’re mistaken. I hereby decree your name to be O’Scar!” ~Arsehole circa 1937
Yep also happened to my family. There is a y in my family name, but that’s very uncommon in the Netherlands, my last name is of French origin. So some bureaucrat changed it to a Dutch y which is an ij and there was no time to correct it since my grandparents had to catch the boat to flee the former Dutch colony. Now my last name is constantly pronounced wrong. I’m probably going to change it in the future but in the Netherlands you are not allowed to change your name except for a few exceptions. And applying for a name change cost a lot of money and you won’t get it back if they reject it. So I probably have to get a lawyer to do it.
Yeah, I’ve considered a name change myself. Decided not to bother as it would mean every time I need to prove my identity to a government organisation I’d need to provide additional change of name documentation.
Government is hard enough to deal with as it is without adding an extra thing that needs to be assessed.
Hey Militant Left, just because every question directed at you assumes you are an asshole, doesn’t mean the same applies to questions to other people
Mc’Dole is what they said, not McDo’le.
Spent lots of effort to get names for my kids that avoid this. Swedish/French. It’s harder than it sounds.
Once I was tasked with doing QA testing for an app which was planned to initially go live in the states of Georgia and Tenessee. One of the required fields was the user’s legal name. I therefore looked up the laws on baby names in those two states.
Georgia has simple rules where a child’s forename must be a sequence of the 26 regular Latin letters.
Tenessee seemed to only require that a child’s name was writable under some writing system, which would imply any unicode code point is permissible.
At the time, I logged a bug that a hypothetical user born in Tenessee with a name consisting of a single emoji couldn’t enter their legal name. I reckon it would also be legal to call a Tenessee baby 'John '.
Sounds like you did a thorough job as a QA tester. As a software engineer, I love to see it.
By the time the app was due to go live, we’d only reported bugs with the signup and login flows. This was misinterpreted as there only being issues with the signup and login flows, and the app launched on time. In reality, it was impossible to get past the login screen.
And then let me guess… Of course the QA testers get the blame, when in reality it’s either management or marketing that wanted to pushe the app out.
Blaming us would be too close to root-cause analysis for them even to consider. We weren’t normally QA testers, but they’d left it until too late to hire internal QA, so roped in the developers (us) from a SaaS vendor their app replied on as emergency QA.
im sure the devs tasked at fixing that bug loved u ;-)
C programmers would ask whether a null-terminated name would be acceptable
Frontend devs hates this guy.
Still better than Jennifer Null I guess
No, cause “John\nDoe” messes up my regex. Sorry, out of the question. I’m not good with regex.
no one is “good” with regex.
Then who’s coming up with all the bits that I copy/paste off the internet? The regex dragon?
From what I’ve seen, it’s Cthulhu.
There was only one, we’re all still copying from him or her.
they likely aren’t good regex’s ;P … anything with more than, say, 6 operators is probably missing an edge case or will be outdated in a year (and then it’s impossible to determine its original intention)
Not legal in Canada. Your legal name must use Latin characters only. This is a sore point for indigenous people.
Hello my name is JohnDoe. My name only contains Latin characters, no spaces allowed.
Ah, but you see, “John” and “Doe” are two names - first and last - and when you say “My name is”, you’re really listing out your names, with spaces inbetween!
But then there’s hyphenated names, and I have no idea how those are treated.
"John Doe"
vs["John", "Doe"]
vs{"firstName":"John", "lastName":"Doe"}
console.log(Object.values(name).join("\n"));
Could be…“Jondo” like, a mononym hahaha.
The Romans also had spaces in between words
But did they have lowercase?
EDIT: Hello my name is JOHN DOE. Only latin characters allowed
But did they have
lowercaseenglish language?Salve! John Doe nomen meum est.
Only latin
charactersallowed(That’s all the latin I remember from school back then)
I was under the impression that that was actually a medieval invention
This comment made me learn. Thank you.
What was used to delineate words before the space character, then?
Nothing but understanding of words and sentences. It was kind of a whole thing. The space character was revolutionary to increasing the spread of literacy. Relevant
Or for those that just want to read: https://en.wikipedia.org/wiki/Scriptio_continua
The inscription on the Pantheon has dots between the words.
M·AGRIPPA·L·F·COS·TERTIVM·FECIT
Did the Romans not use line breaks?
Blank spaces arent characters by definition as they’re the space that allows the letters to exist
Deep. Is Python a form of Jazz?
Yes, and YAML is a war crime.
No, they didn’t even use the space to separate words. Take a look at any Roman inscription in Italy, there are no spaces between the words (just like there are no silent pauses between spoken words).
boustrophedon must make a comeback
Which is both entirely understandable, and also tragic because Canada’s indigenous written characters are so cool. :D
But also, it’s gotta be neat having a name among your people, that “the state” has nothing to do with…
There are a frightening number of systems that don’t allow “-”, which isn’t even an edge case. A lot of people - mostly women - hyphenate their last names on marriage, rather than throw their old name away. My wife did. She legally changed her name when she came of age, and when we met and married years later she said, “I paid for money for my name; I’m not letting it go.” (Note: I wasn’t pressuring her to take my name.) So she hyphenated it, and has come to regret the decision. She says she should have switched, or not, but the hyphen causes problems everywhere. It’s not a legal character in a lot of systems, including some government systems.
It boggles my mind how so many websites and platforms incorrectly say my e-mail address is ‘invalid’ because it has an apostrophe in it.
No. It is NOT invalid. I have been receiving e-mails for years. You just have a shitty developer.
worst thing is, the regex to check email has been available for decades and it’s fine with apostrophies
Well, and remember: If in doubt, send them an e-mail. You probably want to do that anyways to ensure they have access to that mailbox.
You can try to use a regex as a basic sanity check, so they’ve not accidentally typed a completely different info into there, but the e-mail standard allows so many wild mail addresses, that your basic sanity check might as well be whether they’ve typed an
into there.
The regexes are written to comply with RFC 5332 and 6854
They are well defined and you can absolutely definitively check whether an address is allowable or not.
Yeah, I’m just saying that the benefit of using such a regex isn’t massive (unless you’re building a service which can’t send a mail).
a@b
is a syntactically correct e-mail address. Most combinations of letters, an @-symbol and more letters will be syntactically correct, which is what most typos will look like. The regex will only catch fringe cases, such as a user accidentally hitting the spacebar.And then, personally, I don’t feel like it’s worth pulling in one of those massive regexes (+ possibly a regex library) for most use-cases.
There are many regexes that validate email, and they usually aren’t compliant with the RFC, there are some details in the very old answer on SO. So, better not validate and just send a confirmation, than restrict and lock people out, imo
The article you just mentioned in the comments includes both a completely reasonable and viable regex and binary and library alternatives that are in most languages.
Reasonable and viable ≠ RFC compliant
This quote summarises my views:
There is some danger that common usage and widespread sloppy coding will establish a de facto standard for e-mail addresses that is more restrictive than the recorded formal standard.
Yes! Hyphens and “+” are also legal, and while most will accept a dash, many don’t allow ‘+’. But it’s explicitly allowed in the spec!
Ugh and that happens a lot if your email domain has an even slightly unusual TLD too.
And you’d think a simple solution is just leave out the hyphen when you put you name in, but that can also lead to problems when the system is looking for a 100% perfect match.
And good luck if they need to scan the barcode on your ID.
Then the first part is interpreted (in the US, anyway) as a middle name, not as part of the last name. I did run into a recently married woman who did that: dropped her middle name, moved her last to the middle, and used her spouse’s last name.
More commonly, places that don’t take hyphens tend to just run the two names together: Axel-Smith becomes AxelSmith.
Programmers can be really dumb.
As someone who’s mexican I encounter that more than one would think since I have 2 last names and it gets weird sometimes since I also have a middle name.
God, the French. My friend has two first names, two middle, and thankfully only one surname.
Something that could happen in Mexico for a name is Juan Maria as a first, Guillermo David as a middle and Gonzales De Mercado as a last name. Technically 7 words and totally a thing but not common at all, anymore at least.
My mom didn’t hyphenate, but she does include her maiden name when writing her full name, after her middle name. It never even occurred to me that that’s uncommon.
So she writes 4 names? Does she put her maiden and married names both in the “surname” field? Or middle and maiden together in the “middle name” field?
This kind of makes me want to name my kid Pascal-Case
I have come across a shockingly large amount of people who not only have a hyphenated last name but also have a hypenated first name! Dealing with every new computer system is like a new adventure
You’d think by now Jean-Luc Picard would be a well known example and systems are able to deal with it.
There are also fringe externalities from this too. I have my mom’s last name for my middle name and my dad’s for my last name. But back in the 90s, my state would erroneously handle that scenario as having no middle name and both names hyphenated for a last name. I didn’t find this out until I turned 18 and tried to get a retail job and they wouldn’t hire me until it got fixed.
First I had to go to the Dept of Health and get a new birth certificate, then I had to do the same at the social security administration for a new social security card. Hours and hours over multiple days just so I could earn minimum wage folding and selling used clothing. Ironically, the name mixup never was a problem when I did taxes previously.
Can I kill someone who wants to do this? How do I legally get away with it?
Plead permanent sanity. If I was the judge I would let you go.
Plead permanent sanity.
temporary sanity is the best I can manage these days.
Thanks bro
I gotchu
Of myself of the now dead purpetrator?
Sibling of Bobby Drop Tables
Y’all need to learn how to sanitize your inputs!
Little Bobby Tables
Not legal in Sweden. Our “IRS” must also accept the name and deem it legal.
I for one like this. As it stops some very stupid people to name their children some very stupid names. Such as “Adolf Hitler”.
And yes. Someone did try to name their child this and they were appropriately stoped from doing it.
If only Sweden invaded the rest of the world instead of Russia… *le sigh*
Eh, if they went imperial they would be subject to imperial needs leading to all the usual imperial problems.
Funny enough. Sweden already went through that problem. We call it “Age of Greatness”. (Stormaktstiden)
Basically. Sweden got too big too fast, couldn’t maintain an army large enough to secure everything. If i remember correctly, we couldn’t produce enough food, and we lost a bunch of territory.
What, inconsistent units? /s
I accept our new Scandinavian overlords. But I would rather have it be Finland.
Akchtually, Finland is not a Scandinavian country properly.
Fuck that, we think it is in the US. And we’re the only people who matter on the internet.
ugh literally 1984
Should have went with Adolf Olivernipples
“ethics aside” truly a starter for a qa
It’s time to log off and get a vasectomy
If elected president my first order of business will be to make all birth certificates fully unicode compatible.
How is your son
X Æ A-12
?Screw everything about Elon musk
“It sounds like a password”
(ノ-_-)ノ~┻━┻ Miller
Y̴̥͉͕͌̀ǫ̴̗̅̕u̵̱̾̋͐̚ ̷̡͕͈͛̇h̴̳̱̘̆ä̶̼́̕ṽ̷̬͕è̷͓̰̔̌ ̸̪͋m̷͍͎͙̂́̔ͅy̷̰̘̎́̉ͅ ̷̳͒v̷̭̕o̷̢͚̟͇͒̃͐̕t̴̪̙͗̐͆́ë̶̦͗ ̵̗͌̅p̶̰̫͛̑r̷̨͛̏̈́͝e̷͇͍̋̚͜s̸̳͙̒͘î̶̞̍̍̋͜ͅd̴̰̭͚̞͗ě̶̯̖n̶̩̿̕t̶͎͉̂ ̵̦͂̍̀Z̵̧̲̦̹̾͋a̴̒̑ͅl̷͇̘̝̬͒̊͝ǵ̴̹̣͖’̷͂͜o̴̢͔̱̔ò̷̧͛!̷̦̎͑͆͘ ̵̺̼̜̃̑
Howdy friend, I’m ▒⟪♶⳽Ⰶ⮫☲Ⰱ∓✑ⲍ␝ⅼⓑ⊯⛝≋ⱚⵯ⿳➡⸷⋘⎋⛏⍫⣺⨼⛜⧄ⅈ⎥⦶⋣⩥⮯⨏⼧⁹⟤.
Oh, poor thing. It must be terrible to be one of insufferable Elon Musk’s progeny
I govenment site I visited recenly made a point of how it accepts emojis in passwords!