aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB
diff options
context:
space:
mode:
authorDavid M <davidmj@users.sourceforge.net>2008-04-20 04:57:29 +0000
committerDavid M <davidmj@users.sourceforge.net>2008-04-20 04:57:29 +0000
commit0bfd3b59e7c0f565516dc5f626f3aead38a6b886 (patch)
tree0a2cc9f6816dacdf247e194c7e889406a5344853 /phpBB
parent3e64e9b8999e6c4c004e1cb0721c76ee6b612d53 (diff)
downloadforums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.tar
forums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.tar.gz
forums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.tar.bz2
forums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.tar.xz
forums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.zip
#18775
git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@8507 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB')
-rw-r--r--phpBB/docs/CHANGELOG.html1
-rw-r--r--phpBB/includes/functions_install.php2
2 files changed, 2 insertions, 1 deletions
diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html
index 067a2c88e4..c6143196c2 100644
--- a/phpBB/docs/CHANGELOG.html
+++ b/phpBB/docs/CHANGELOG.html
@@ -89,6 +89,7 @@
<li>[Fix] Fixed blank style on setups having no username defined within config.php (Bug #25065)</li>
<li>[Fix] Made the compress_tar class tolerate archives that do not properly have their archived contents listed (Bug #14429 / thanks to JRSweets for his patch)</li>
<li>[Fix] Moved topics should not count towards the number of topics in a forum (Bug #14648 / thanks to Schumi for his patch)</li>
+ <li>[Fix] Properly check for invalid characters in MySQL DB prefixes during install (Bug #18775)</li>
</ul>
<a name="v300"></a><h3>1.ii. Changes since 3.0.0</h3>
diff --git a/phpBB/includes/functions_install.php b/phpBB/includes/functions_install.php
index f43ef7c5c7..90459813f1 100644
--- a/phpBB/includes/functions_install.php
+++ b/phpBB/includes/functions_install.php
@@ -286,7 +286,7 @@ function connect_check_db($error_connect, &$error, $dbms_details, $table_prefix,
{
case 'mysql':
case 'mysqli':
- if (strpos($table_prefix, '-') !== false || strpos($table_prefix, '.') !== false)
+ if (strspn($table_prefix, '-./\\') !== 0)
{
$error[] = $lang['INST_ERR_PREFIX_INVALID'];
return false;