Re: allowing other chars in User.username

2010-02-22 Thread Aljosa Mohorovic
On Feb 22, 1:58 pm, Dougal Matthews wrote: > I'm not sure what your reason if for using such characters? enabling non-english names to be used (with chars like čćžđš), separating first and last name with other chars (like "first.last_name" or "first-last_name" or "first last_name"). especially si

Re: allowing other chars in User.username

2010-02-22 Thread Dougal Matthews
On 22 February 2010 11:56, Aljosa Mohorovic wrote: > what are security concerns if username is allowed to contain chars > like ".,;-() " and non-ascii alphabet letters? > will orm still properly escape string before querying the database? > > Aljosa > > In short, yes it will. All strings passed th