Changeset 3454

Timestamp:

01/18/2006 05:37:26 AM (21 years ago)

Author:

ryan

Message:

sanitize_user() fixes.

File:

• trunk/wp-includes/functions-formatting.php (modified) (1 diff)

trunk/wp-includes/functions-formatting.php

@@ -267 +267 @@
 
 function sanitize_user( $username ) {
-        return preg_replace('|a-z0-9 _.-|i', '', $username);
+        $raw_username = $username;
+        $username = strip_tags($username);
+        // Kill octets
+        $username = preg_replace('|%([a-fA-F0-9][a-fA-F0-9])|', '', $username);
+        $username = preg_replace('/&.+?;/', '', $username); // Kill entities
+        return apply_filters('sanitize_user', $username, $raw_username);
 }