Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Search for users returns non-matching results
Just playing with the search function I noticed that searching for users containing the string 'llo' returned users such as 'wade1' as well as 'fellows' for example. Whatever short string I use returns some matching and some non-matching users. (I checked and the short strings weren't part of the users real name.)
I was signed in (admin) at the time, but later I found that the same searches behave correctly (eg. only selects matching users) when I run them while signed out. This is consistently repeatable.
Anyone know why it's happening ?
0
This discussion has been closed.
Comments
where ((u.Name like '%llo%' or u.FirstName like '%llo%' or u.LastName like '%llo%' or u.Email like '%llo%' ) )
The extra fields are added in People.Class.UserManager.php:
if ($this->Context->Session->User->Permission('PERMISSION_EDIT_USERS') || $this->Context->Session->User->Permission('PERMISSION_APPROVE_APPLICANTS') || $this->Context->Session->User->Permission('PERMISSION_CHANGE_USER_ROLE')) { $s->SearchFields[] = 'u.FirstName'; $s->SearchFields[] = 'u.LastName'; $s->SearchFields[] = 'u.Email'; }