mirror of
https://github.com/Lastorder-DC/rhymix.git
synced 2026-01-08 03:01:43 +09:00
Fix loophole for duplicate nickname using invisible Unicode characters
cf. xpressengine/xe-core#2025
This commit is contained in:
parent
99cb67b5db
commit
07da55ba8e
2 changed files with 2 additions and 2 deletions
|
|
@ -95,7 +95,7 @@ class memberAdminController extends member
|
|||
{
|
||||
if(isset($args->{$val}))
|
||||
{
|
||||
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', $args->{$val});
|
||||
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', html_entity_decode($args->{$val}));
|
||||
}
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -417,7 +417,7 @@ class memberController extends member
|
|||
{
|
||||
if(isset($args->{$val}))
|
||||
{
|
||||
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', $args->{$val});
|
||||
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', html_entity_decode($args->{$val}));
|
||||
}
|
||||
}
|
||||
$output = $this->insertMember($args);
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue