Question

I just discovered that even with a validates_uniqueness_of :email, :username customers can create new accounts with different case similar values.

Examples:

username
USERNAME

[e-mail]
[e-mail]

Is this by design or am I missing something?

I have this validate line in my model

validates_uniqueness_of :email, :username

It does work as expected with similar values:

username
username

I’m using rails 3.2.9

Answer 1

Yes this is by design. [e-mail] and [e-mail] are not the same string, what you want in your situation is to turn case sensitivity off.

validates_uniqueness_of :email, :case_sensitive => false
validates_uniqueness_of :username, :case_sensitive => false