mirror of
https://github.com/Lastorder-DC/rhymix.git
synced 2026-05-10 20:44:28 +09:00
Fix loophole for duplicate nickname using invisible Unicode characters
cf. xpressengine/xe-core#2025
This commit is contained in:
parent
99cb67b5db
commit
07da55ba8e
2 changed files with 2 additions and 2 deletions
|
|
@ -95,7 +95,7 @@ class memberAdminController extends member
|
||||||
{
|
{
|
||||||
if(isset($args->{$val}))
|
if(isset($args->{$val}))
|
||||||
{
|
{
|
||||||
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', $args->{$val});
|
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', html_entity_decode($args->{$val}));
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -417,7 +417,7 @@ class memberController extends member
|
||||||
{
|
{
|
||||||
if(isset($args->{$val}))
|
if(isset($args->{$val}))
|
||||||
{
|
{
|
||||||
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', $args->{$val});
|
$args->{$val} = preg_replace('/[\pZ\pC]+/u', '', html_entity_decode($args->{$val}));
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
$output = $this->insertMember($args);
|
$output = $this->insertMember($args);
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue