diff options
Diffstat (limited to 'phpBB/includes/functions.php')
| -rw-r--r-- | phpBB/includes/functions.php | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/phpBB/includes/functions.php b/phpBB/includes/functions.php index 0f4961d6e2..4c93d6a6f7 100644 --- a/phpBB/includes/functions.php +++ b/phpBB/includes/functions.php @@ -476,6 +476,7 @@ function generate_pagination($base_url, $num_items, $per_page, $start_item, $add // // Check to see if the username has been taken, or if it is disallowed. +// Also checks if it includes the " character, which we don't allow in usernames. // Used for registering, changing names, and posting anonymously with a username // function validate_username($username) @@ -550,6 +551,12 @@ function validate_username($username) } } + // Don't allow " in username. + if ( strstr($username, '"') ) + { + return FALSE; + } + return(TRUE); } |