From cf02e7c01e0f1dcc57e4e3033d922a56cb16a50d Mon Sep 17 00:00:00 2001 From: Meik Sievertsen Date: Fri, 1 Feb 2008 12:49:38 +0000 Subject: [PATCH] disallow yet another character (there are more, of course - but we do not add every character) git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@8361 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/docs/CHANGELOG.html | 1 + phpBB/includes/functions_validate.php | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 668671d4da..cf95563a89 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -79,6 +79,7 @@ p,ul,td {font-size:10pt;}
  • [Fix] Fixed html output in make_forum_select if no forums present (Bug #436)
  • [Fix] Fixed spelling error(s) in lang_admin.php (Bug #7172, #6978)
  • [Fix] Correctly display censored words in admin panel (Bug #12271)
    • +
  • [Fix] Do not allow soft hyphen \xAD in usernames (reported by Bander00)

    • l.ii. Changes since 2.0.21

    diff --git a/phpBB/includes/functions_validate.php b/phpBB/includes/functions_validate.php index 42bf2e80bb..fdb4ab1788 100644 --- a/phpBB/includes/functions_validate.php +++ b/phpBB/includes/functions_validate.php @@ -101,7 +101,7 @@ function validate_username($username) $db->sql_freeresult($result); // Don't allow " and ALT-255 in username. - if (strstr($username, '"') || strstr($username, '"') || strstr($username, chr(160))) + if (strstr($username, '"') || strstr($username, '"') || strstr($username, chr(160)) || strstr($username, chr(173))) { return array('error' => true, 'error_msg' => $lang['Username_invalid']); }