Changeset 3454

Timestamp:

01/18/2006 05:37:26 AM (19 years ago)

Author:

ryan

Message:

sanitize_user() fixes.

File:

• trunk/wp-includes/functions-formatting.php (modified) (1 diff)

trunk/wp-includes/functions-formatting.php

@@ -267 +267 @@
 
 function sanitize_user( $username ) {
-    return preg_replace('|a-z0-9 _.-|i', '', $username);
+    $raw_username = $username;
+    $username = strip_tags($username);
+    // Kill octets
+    $username = preg_replace('|%([a-fA-F0-9][a-fA-F0-9])|', '', $username);
+    $username = preg_replace('/&.+?;/', '', $username); // Kill entities
+    return apply_filters('sanitize_user', $username, $raw_username);
 }