Difference between revisions of "LlRequestDisplayName"

From Second Life Wiki
Jump to: navigation, search
(Added warning about escaping strings to prevent a wave of injection attacks on people's backends when these functions go live.)
Line 1: Line 1:
 
{{#vardefine:p_data_desc|DATA_* flag}}{{LSL_Function
 
{{#vardefine:p_data_desc|DATA_* flag}}{{LSL_Function
|inject-1={{LSL Function/avatar|id}}{{LSL Generic/pre-release|server-release=[[Display Names|DisplayNames]]}}
+
|inject-1={{LSL_Function/warning|Security|It is a '''terrible''' idea to tie any security measures to display names; they are not unique and can easily be changed.}}
{{LSL_Function/warning|Security|It is a '''terrible''' idea to tie any security measures to display names. Don't do it.}}
+
{{LSL_Function/warning|Security|Display names can contain [[Display_names#Punctuation_characters_allowed_in_your_display_name|quotes and some punctuation]], remember to '''escape''' strings being passed to command line scripts, sql queries, etc.}}
{{LSL_Function/warning|Security|They can contain quotes and some punctuation, remember to '''escape''' strings being passed to command line scripts, sql queries, etc.}}
+
 
|func_id=NNN|func_sleep=0.0|func_energy=10.0
 
|func_id=NNN|func_sleep=0.0|func_energy=10.0
 
|func=llRequestDisplayName
 
|func=llRequestDisplayName

Revision as of 23:54, 26 November 2010

Emblem-important-red.png Security Warning!

It is a terrible idea to tie any security measures to display names; they are not unique and can easily be changed.

Emblem-important-red.png Security Warning!

Display names can contain quotes and some punctuation, remember to escape strings being passed to command line scripts, sql queries, etc.

Summary

Function: key llRequestDisplayName( key id );

Requests the Display Name of the agent identified by id. When the Display Name is available the dataserver event will be raised. The agent identified by id does not need to be in the same region or online at the time of the request.
Returns the key that is used to identify the dataserver event when it is raised.

• key id

Caveats

  • If the request fails for any reason, there will be no error notice or dataserver event. You may use a timer to check for stale requests.
  • If you merely wish to show avatar name information in the viewer window, it may be more straightforward to avoid a dataserver event and simply output: <lsl>llSay(0, "secondlife:///app/agent/" + (string)id + "/about");</lsl>
All Issues ~ Search JIRA for related Bugs

Examples

<lsl>key owner_key; key owner_name_query; string owner_display_name;

default {

   state_entry()
   {
       owner_key = llGetOwner();
       owner_name_query = llRequestDisplayName(owner_key);
   }
   dataserver(key queryid, string data)
   {
       if ( owner_name_query == queryid )
       {
           owner_display_name = data;
           llSay(0, "The display name of the owner of this script : " + owner_display_name );
       }
   }
}</lsl>

See Also

Events

•  dataserver

Functions

•  llGetDisplayName
•  llRequestUsername

Deep Notes

Search JIRA for related Issues

Signature

function key llRequestDisplayName( key id );