Changeset 3481 for trunk/wp-admin/admin-functions.php

Timestamp:

01/25/2006 03:09:16 AM (21 years ago)

Author:

ryan

Message:

Username sanitization cleanups.

File:

• trunk/wp-admin/admin-functions.php (modified) (3 diffs)

trunk/wp-admin/admin-functions.php

@@ -330 +330 @@
 
 function edit_user($user_id = 0) {
-        global $current_user, $wp_roles;
+        global $current_user, $wp_roles, $wpdb;
 
         if ($user_id != 0) {
@@ -336 +336 @@
                 $user->ID = $user_id;
                 $userdata = get_userdata($user_id);
-                $user->user_login = $userdata->user_login;
+                $user->user_login = $wpdb->escape($userdata->user_login);
         } else {
                 $update = false;
@@ -406 +406 @@
         if (!empty ($pass1))
                 $user->user_pass = $pass1;
+
+        if ( !validate_username($user->user_login) )
+                $errors['user_login'] = __('<strong>ERROR</strong>: This username is invalid.  Please enter a valid username.');
 
         if (!$update && username_exists($user->user_login))