Make WordPress Core

Opened 15 years ago

Closed 15 years ago

#11751 closed defect (bug) (worksforme)

lowercase_username() is not mb_string safe

Reported by: denis-de-bernardy's profile Denis-de-Bernardy Owned by: hakre's profile hakre
Milestone: Priority: normal
Severity: normal Version: 3.0
Component: Charset Keywords:
Focuses: multisite Cc:

Description

ms-functions.php has a lowercase_username() function, which is an alias for strtolower.

Are we sure that the username is UTF7? If not, we should make sure that it is.

Change History (4)

#1 @nacin
15 years ago

  • Keywords multisite added

#2 @hakre
15 years ago

I'm pretty shure that Denis meant 7Bit-Ascii and not UTF-7.

#3 @nacin
15 years ago

lowercase_username() and strtolower_usernames() were yanked in [12948] because they both duplicated strtolower().

Should we be accounting for mb strings here? sanitize_user() removes all non-ascii characters.

#4 @nacin
15 years ago

  • Milestone 3.0 deleted
  • Resolution set to worksforme
  • Status changed from new to closed
Note: See TracTickets for help on using tickets.