diff options
author | David M <davidmj@users.sourceforge.net> | 2008-04-20 04:57:29 +0000 |
---|---|---|
committer | David M <davidmj@users.sourceforge.net> | 2008-04-20 04:57:29 +0000 |
commit | 0bfd3b59e7c0f565516dc5f626f3aead38a6b886 (patch) | |
tree | 0a2cc9f6816dacdf247e194c7e889406a5344853 /phpBB | |
parent | 3e64e9b8999e6c4c004e1cb0721c76ee6b612d53 (diff) | |
download | forums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.tar forums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.tar.gz forums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.tar.bz2 forums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.tar.xz forums-0bfd3b59e7c0f565516dc5f626f3aead38a6b886.zip |
#18775
git-svn-id: file:///svn/phpbb/branches/phpBB-3_0_0@8507 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB')
-rw-r--r-- | phpBB/docs/CHANGELOG.html | 1 | ||||
-rw-r--r-- | phpBB/includes/functions_install.php | 2 |
2 files changed, 2 insertions, 1 deletions
diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 067a2c88e4..c6143196c2 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -89,6 +89,7 @@ <li>[Fix] Fixed blank style on setups having no username defined within config.php (Bug #25065)</li> <li>[Fix] Made the compress_tar class tolerate archives that do not properly have their archived contents listed (Bug #14429 / thanks to JRSweets for his patch)</li> <li>[Fix] Moved topics should not count towards the number of topics in a forum (Bug #14648 / thanks to Schumi for his patch)</li> + <li>[Fix] Properly check for invalid characters in MySQL DB prefixes during install (Bug #18775)</li> </ul> <a name="v300"></a><h3>1.ii. Changes since 3.0.0</h3> diff --git a/phpBB/includes/functions_install.php b/phpBB/includes/functions_install.php index f43ef7c5c7..90459813f1 100644 --- a/phpBB/includes/functions_install.php +++ b/phpBB/includes/functions_install.php @@ -286,7 +286,7 @@ function connect_check_db($error_connect, &$error, $dbms_details, $table_prefix, { case 'mysql': case 'mysqli': - if (strpos($table_prefix, '-') !== false || strpos($table_prefix, '.') !== false) + if (strspn($table_prefix, '-./\\') !== 0) { $error[] = $lang['INST_ERR_PREFIX_INVALID']; return false; |