Illegal username...

Nuke Soldier Joined: Oct 29, 2006 Posts: 18

Hello, Normaly i search this website before i ask a question. But the search didn` t work i got some errors.

So here is my question. I have upgraded my forum to Nuke7.6 patch 3.1 and some users can`t log in anymore. Becauce in version7.6 patch 3.1 space between an username is not allowed any more. So i would like to change this.

This is copied from the index.php from the your_account modulle.

Code:

if(isset($_GET['redirect'])) $redirect = substr($_SERVER['QUERY_STRING'], strpos($_SERVER['QUERY_STRING'], "redirect=") + strlen("redirect="), strlen($_SERVER['QUERY_STRING']));
if (isset($username) && (ereg("[^a-zA-Z0-9_-]",$username))) {
die("Illegal username...");
}

So what do i have to change so users with space between their name can login agian. (Example nuke cops is not allowed, but nuke_cops is allowed)

Site Admin Joined: Aug 17, 2003 Posts: 12388

Add a space here

Code:

[^a-zA-Z0-9_-]

TO

[^a-zA-Z0-9_- ]

Nuke Cadet Joined: Apr 16, 2006 Posts: 4

Does this work for other symbols as well? Just adding them to the list inside the brackets?

For example, I'd like to add usernames with the following symbols: =, $, @, ñ, Ñ, >, <, |, (, ), ., : etc.

If possible, does this suppose a security risk?

Nuke Cadet Joined: May 05, 2007 Posts: 3

This last question never got answered and it's a couple of months old, but it looks like a similar problem that I've been having. As an additional part of the above question, how do you add [ and ] characters to the above list since they are operators for the code?

Site Admin Joined: Aug 17, 2003 Posts: 12388

Generally that should work for all characters, except those that are special for regular expressions. To escape those characters, you need to use a slash

Code:

\[