User Name is Changed and cannot Login

testuser · Post by **testuser** » Tue Apr 25, 2017 5:27 am

Hi there,

I have a test user account whose login name is mondragon. When I tried to login as this user, the login name changed to mon<x>dragon even though I used the right password. How can I fix it?

mobhar · Post by **mobhar** » Tue Apr 25, 2017 9:27 am

Because of "mondragon" is consimilar to "ondragover" which is one of the XSS words in $EW_XSS_ARRAY array variable, then it will be changed by adding the "<x>" to avoid XSS (Cross Site Scripting). This is about the security reason.

You may either disable "Remove XSS" option from "Tools" -> "Advanced Settings", OR remove "ondragover" words from $EW_XSS_ARRAY in the generated "ewcfg*.php" file, OR do not use such username again.

testuser · Post by **testuser** » Tue Apr 25, 2017 9:44 pm

It has the same behavior after I disable "Remove XSS" option. But it works after I remove "ondragover" words from $EW_XSS_ARRAY. Thanks.