My users can't use numbers in their login names.

Although it is allowed in file setup_options.php
$userRegName='_A-Za-z0-9äöüß ';

using miniBB 2.2b

What's wrong here?

So far I suppose, in the newest version usernames can't consist of the numbers only (to avoid conflict between username and user ID in some add-ons, for example, Private Messaging), but still, numbers may be used, you can try on minibb demo.

I just tried your minibb demo with username "elo22".

It doesn't work.

Message:
"Error in user data: Password is allowed to contain only latin letters (a-z and A-Z), numbers (0-0) and underscores, it must be between 5 and 30 characters in length."


----

I remember that using numbers worked in past, because I have some users with numbers in their name in my database. So there must be made any change in forums code. But where?

So your mistake is not in the username, but in the password. Do you see what's written? Error in user data: Password... I have registered 'elo22' successfully and have made a post from this account.

Oh sorry, my mistake. Now it works in demo forums. But not in mine.... I can't remember that I made any changes to forums code for registration.

Which files should I check?

You should check your password first ;-) Then the option under setup_options.php (which seems correct for you) and bb_func_checkusr.php file.

Thanks, there was an old version of bb_func_checkusr.php on server. I updated it and now it works!

G'day, Paul.

Hope you can help me with this latest issue ...

A site visitor to my miniBB Forums has reported that he could not register his preferred username (e.g. 123greetings), and the error was "Username can contain only letters (a to z) and numbers. Please keep your username short."

Usernames containing numbers (either as prefix or suffix: 123abcd or abcd123) were never an issue before; the only recent change to the forums is the upgrade to v3.4.2.

Username related config:
$userRegName='_A-Za-z0-9 ';
$disallowNames and $disallowNamesIndex both have some not family-friendly terms specified, but no numbers.

Any advice you are happy to offer will be gratefully received.

With thanks,
marsbar

marsbar
Most likely, this is coming from the function `verifyUsername`, which is in bb_func_checkusr.php.

Usernames could be about "abcd123", but they could not be about "123abcd", and they could not consist of numbers only. This is most likely is your issue, and this is a security issue.

Despite you could non-destructively re-define this function, for example, putting in bb_specials.php and removing the code line, which is commented as "should be sensful alphanumerical", my recommendation is to leave it as it is. Usernames truly should be "sensful", and allowing them to start with a number or consist of numbers only, you could open a door to quite unwanted actions in some add-ons like Private Messaging.

Hi, Paul! Thanks for your reply.

Just confirming that I have understood you correctly; are you saying miniBB's default verifyUsername function is:
- disallow names that contain only numbers
- disallow numbers before letters?

If the above is true, then something odd is going on, because ...
a) I have always used the default bb_func_checkusr.php,
b) I have users with usernames that begin with numbers! Those names were registered years ago. I do not know exactly from when the ability to do register names that starts with numbers stopped. :(

Has the verifyUsername function changed over the years, Paul? Do you advise I replace my copy?

With thanks,
marsbar

Yes, the newest default miniBB function is about that.

You have older usernames begin with numbers, because earlier miniBB function didn't have that protection.

Yes, verifyUsername function changed. You could still keep your older copy, or you could re-define this function with your own conditions, as I've described above. As I've mentioned, numbers in username could be a conflict when using PM add-on; also for some other cases. If you don't use this add-on, you could try to keep starting numbers, or total numbers in username allowed.

A-ha! That explains why, once upon a time, users were able to register names that began with number(s). I'll stick with the new default, and just update the standard error message to make this new restriction clear to users.

Thanks, Paul, for your help with this!

Best wishes from Australia,
marsbar

It's actually a good reminder for me, too; I'll extend the error message in the next release as well. Thanks for keeping an eye on this!