Fix loophole for duplicate nickname using invisible Unicode characters

cf. xpressengine/xe-core#2025
This commit is contained in:
Kijin Sung 2017-02-10 22:01:10 +09:00
parent 99cb67b5db
commit 07da55ba8e
2 changed files with 2 additions and 2 deletions

View file

@ -95,7 +95,7 @@ class memberAdminController extends member
{
if(isset($args->{$val}))
{
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', $args->{$val});
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', html_entity_decode($args->{$val}));
}
}

View file

@ -417,7 +417,7 @@ class memberController extends member
{
if(isset($args->{$val}))
{
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', $args->{$val});
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', html_entity_decode($args->{$val}));
}
}
$output = $this->insertMember($args);