• trustnoone@lemmy.sdf.org
    link
    fedilink
    arrow-up
    0
    ·
    3 months ago

    I have an apostrophe and it’s super annoying as some companies see it as a SQL injection hack and sanitize it.

    So I’ve received ID with Mc%20dole or they add a space in it. Or I’ll get a work email with an apostrophe but I cant use it anywhere because sites have it disabled. And I’ve missed my flight because I changed my ticket once to add the apostrophe and the system just broke at the gate.

    Worse yet many flight companies have “you will not be able to board if your ID doesn’t exactly reflect your details” but their form doesn’t allow it. Even most forms for card payments don’t allow it even though it’s the name on my card.

    • agilob@programming.dev
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      3 months ago

      I have an apostrophe and it’s super annoying as some companies see it as a SQL injection hack and sanitize it.

      My surname contains a character that’s only present in the Polish alphabet. Writing my full name as is broke lots of systems, encoding, printed paperwork and even British naturalisation application on Home Office website. My surname was part of my username back at uni, and everytime I tried to login on Windows, it would crash underlying LDAP server, logging everyone in the classroom out and forcing ICT to restart the server.

    • rekabis@lemmy.ca
      link
      fedilink
      arrow-up
      0
      ·
      3 months ago

      I have an apostrophe

      Scottish/Irish?

      some companies see it as a SQL injection hack and sanitize it.

      Which kind of apostrophe?

      A straight apostrophe, fine - that can and does get used in valid SQL injection attacks. I would be disgusted at any input form that didn’t sanitize that.

      But a curly apostrophe? Nothing should be filtering a curly apostrophe, as it has no function or use within SQL. So if you learn how to bring that up in alt codes (Windows, specifically), Key combos (Mac) or dead keys (Linux), as well as direct Unicode codes for most any Win/Mac/*Nix platform, you should be golden.

      Unless the developer of that input form was a complete moron and made extra-tight validation.

      Plus, knowing the inputs for a lot of extended UTF-8 characters not found on a normal keyboard is also a wee bit of a typing superpower.