Changeset 3481 for trunk/wp-admin/admin-functions.php

Timestamp:

01/25/2006 03:09:16 AM (20 years ago)

Author:

ryan

Message:

Username sanitization cleanups.

File:

• trunk/wp-admin/admin-functions.php (modified) (3 diffs)

trunk/wp-admin/admin-functions.php

@@ -330 +330 @@
 
 function edit_user($user_id = 0) {
-    global $current_user, $wp_roles;
+    global $current_user, $wp_roles, $wpdb;
 
     if ($user_id != 0) {
@@ -336 +336 @@
         $user->ID = $user_id;
         $userdata = get_userdata($user_id);
-        $user->user_login = $userdata->user_login;
+        $user->user_login = $wpdb->escape($userdata->user_login);
     } else {
         $update = false;
@@ -406 +406 @@
     if (!empty ($pass1))
         $user->user_pass = $pass1;
+
+    if ( !validate_username($user->user_login) )
+        $errors['user_login'] = __('<strong>ERROR</strong>: This username is invalid.  Please enter a valid username.');
 
     if (!$update && username_exists($user->user_login))