WordPress.org

Make WordPress Core

Opened 6 years ago

Closed 5 years ago

#11751 closed defect (bug) (worksforme)

lowercase_username() is not mb_string safe

Reported by: Denis-de-Bernardy Owned by: hakre
Milestone: Priority: normal
Severity: normal Version: 3.0
Component: Charset Keywords:
Focuses: multisite Cc:

Description

ms-functions.php has a lowercase_username() function, which is an alias for strtolower.

Are we sure that the username is UTF7? If not, we should make sure that it is.

Change History (4)

comment:1 @nacin6 years ago

  • Keywords multisite added

comment:2 @hakre6 years ago

I'm pretty shure that Denis meant 7Bit-Ascii and not UTF-7.

comment:3 @nacin5 years ago

lowercase_username() and strtolower_usernames() were yanked in [12948] because they both duplicated strtolower().

Should we be accounting for mb strings here? sanitize_user() removes all non-ascii characters.

comment:4 @nacin5 years ago

  • Milestone 3.0 deleted
  • Resolution set to worksforme
  • Status changed from new to closed
Note: See TracTickets for help on using tickets.