From 2689d6aa1ea3f8af7f405da3a25bea75d433b686 Mon Sep 17 00:00:00 2001 From: Dries Buytaert Date: Wed, 25 Jun 2003 15:46:03 +0000 Subject: [PATCH] - Narrow the set of allowed usernames to prevent people from messing with it. --- modules/user.module | 3 +-- modules/user/user.module | 3 +-- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/modules/user.module b/modules/user.module index 3b024c9d70b..0e03f6e8173 100644 --- a/modules/user.module +++ b/modules/user.module @@ -175,9 +175,8 @@ function user_validate_name($name) { if (ereg("^ ", $name)) return t("The username cannot begin with a space."); if (ereg(" \$", $name)) return t("The username cannot end with a space."); if (ereg(" ", $name)) return t("The username cannot contain multiple spaces in a row."); - // if (ereg("[^a-zA-Z0-9@-@]", $name)) return t("The username contains an illegal character."); + if (ereg("[^ a-zA-Z0-9@-@]", $name)) return t("The username contains an illegal character."); if (ereg('@', $name) && !eregi('@([0-9a-z](-?[0-9a-z])*\.)+[a-z]{2}([zmuvtg]|fo|me)?$', $name)) return t("The username is not a valid authentication ID."); - if (!eregi('^[[:print:]]+', $name)) return t("The name contains an illegal character."); if (strlen($name) > 56) return t("The username '%name' is too long: it must be less than 56 characters.", array("%name" => $name)); } diff --git a/modules/user/user.module b/modules/user/user.module index 3b024c9d70b..0e03f6e8173 100644 --- a/modules/user/user.module +++ b/modules/user/user.module @@ -175,9 +175,8 @@ function user_validate_name($name) { if (ereg("^ ", $name)) return t("The username cannot begin with a space."); if (ereg(" \$", $name)) return t("The username cannot end with a space."); if (ereg(" ", $name)) return t("The username cannot contain multiple spaces in a row."); - // if (ereg("[^a-zA-Z0-9@-@]", $name)) return t("The username contains an illegal character."); + if (ereg("[^ a-zA-Z0-9@-@]", $name)) return t("The username contains an illegal character."); if (ereg('@', $name) && !eregi('@([0-9a-z](-?[0-9a-z])*\.)+[a-z]{2}([zmuvtg]|fo|me)?$', $name)) return t("The username is not a valid authentication ID."); - if (!eregi('^[[:print:]]+', $name)) return t("The name contains an illegal character."); if (strlen($name) > 56) return t("The username '%name' is too long: it must be less than 56 characters.", array("%name" => $name)); }