Changeset 1372

Timestamp:

07/11/08 15:05:19 (5 months ago)

Author:

donncha

Message:

Make sure username and blogname are alphanumeric only, fixes #523

Files:

• trunk/wp-admin/wpmu-edit.php (modified) (1 diff)
• trunk/wp-includes/wpmu-functions.php (modified) (1 diff)

trunk/wp-admin/wpmu-edit.php

@@ -96 +96 @@
-
-                $blog = $_POST['blog'];
-strtolower( wp_specialchars( $blog['domain']
+ereg_replace("[^A-Za-z0-9]", "", strtolower( wp_specialchars( $blog['domain'] )
-                $email = wp_specialchars( $blog['email'] );
-                $title = stripslashes( wp_specialchars( $blog['title'] ) );

trunk/wp-includes/wpmu-functions.php

@@ -1124 +1124 @@
-
-function wpmu_create_user( $user_name, $password, $email) {
+        $user_name = ereg_replace("[^A-Za-z0-9]", "", $user_name);
-        if ( username_exists($user_name) )
-                return false;