mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-07-31 05:50:42 +02:00
Code Issues Releases Wiki Activity

[ticket/security/254] Disallow whitespace characters that might be invisible

Browse Source 
SECURITY-254
This commit is contained in:
Marc Alexander
2021-05-24 17:08:28 +02:00
parent ed33f06235
commit f302440297
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
phpBB/includes/functions_user.php
View File

@@ -1752,7 +1752,8 @@ function validate_username($username, $allowed_username = false, $allow_all_name
} }
// ... fast checks first. // ... fast checks first.
if (strpos($username, '"') !== false || strpos($username, '"') !== false || empty($clean_username)) if (strpos($username, '"') !== false || strpos($username, '"') !== false || empty($clean_username)
|| preg_match('/[\x{180E}\x{2005}-\x{200D}\x{202F}\x{205F}\x{2060}\x{FEFF}]/u', $username))
{ {
return 'INVALID_CHARS'; return 'INVALID_CHARS';
} }