Cause: If the webform author includes a quote mark (") inside the field name of a form element, the poll is displayed but not submitted correctly. If a user enters values in the poll and hits submit, all fields prior to the one containing the quotes are not submitted as part of the user submission. The quote mark breaks the HTML, splitting the tag and making the forms buggy.

Replicating: Create a webform with 3 elements, put a quote mark in the name of the second element and try to submit a reponse - only element 3 is reported by email adn inserted in the DB, elements 1 and 2 are lost.

Proposed solution: Check the input when an element is edited or added and disallow quotes in the field name, or remove them upon input, or escape them when creating the HTML.

Workaround: Don't put quotes in field names in your webforms!

Comments

quicksketch’s picture

Status: Active » Closed (fixed)

4.6 isn't being supported at this point.