a user can subscribe with a username identical to an existing one, using a character from a non latin alphabet. in podilates.gr, a greek-speaking drupal forum concerning bicycle, a user registered as fantasmamοre although it already existed such username (fantasmamore). the 2 accounts:

http://www.podilates.gr/?q=user/2043
http://www.podilates.gr/?q=user/5298

if you change the page`s character encoding, to something other than unicode, you`ll see the difference.

Comments

naxoc’s picture

naxoc commented
Title: duplicate usernames » duplicate usernames (homographs)
Version: 6.16 » 8.x-dev

Not sure how to fix this and if it should be fixed. But it is true that it can be an uncomfortable (un)feature that usernames can look exactly the same. More about it here: http://en.wikipedia.org/wiki/IDN_homograph_attack

Version: 8.0.x-dev » 8.1.x-dev

Drupal 8.0.6 was released on April 6 and is the final bugfix release for the Drupal 8.0.x series. Drupal 8.0.x will not receive any further development aside from security fixes. Drupal 8.1.0-rc1 is now available and sites should prepare to update to 8.1.0.

Bug reports should be targeted against the 8.1.x-dev branch from now on, and new development or disruptive changes should be targeted against the 8.2.x-dev branch. For more information see the Drupal 8 minor version schedule and the Allowed changes during the Drupal 8 release cycle.

Version: 8.1.x-dev » 8.2.x-dev

Drupal 8.1.9 was released on September 7 and is the final bugfix release for the Drupal 8.1.x series. Drupal 8.1.x will not receive any further development aside from security fixes. Drupal 8.2.0-rc1 is now available and sites should prepare to upgrade to 8.2.0.

Bug reports should be targeted against the 8.2.x-dev branch from now on, and new development or disruptive changes should be targeted against the 8.3.x-dev branch. For more information see the Drupal 8 minor version schedule and the Allowed changes during the Drupal 8 release cycle.

dpi’s picture

dpi
Location Perth, Australia
commented
Issue summary: View changes
Status: Active » Closed (won't fix)
Related issues: +#1290528: Disallow English symbols and math characters in Username

They're not technically duplicates, they just look the same.

Restriction of usable username characters can be handled by contrib.

See also #1290528-9: Disallow English symbols and math characters in Username..