Vergleich inc/datahandlers/user.php - 1.6.9 - 1.6.18

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 90	Zeile 90
} // Check for certain characters in username (<, >, &, commas and slashes)	} // Check for certain characters in username (<, >, &, commas and slashes)
if(strpos($username, "<") !== false \|\| strpos($username, ">") !== false \|\| strpos($username, "&") !== false \|\| my_strpos($username, "\\") !== false \|\| strpos($username, ";") !== false \|\| strpos($username, ",") !== false)	if(strpos($username, "<") !== false \|\| strpos($username, ">") !== false \|\| strpos($username, "&") !== false \|\| my_strpos($username, "\\") !== false \|\| strpos($username, ";") !== false \|\| strpos($username, ",") !== false \|\| !validate_utf8_string($username, false, false))
{ $this->set_error("bad_characters_username"); return false;	{ $this->set_error("bad_characters_username"); return false;
Zeile 126	Zeile 126
return true; }	return true; }

/** * Verifies if a username is already in use or not. *	/** * Verifies if a username is already in use or not. *
Zeile 136	Zeile 136
{ global $db;	{ global $db;
$username = &$this->data['username']; $uid_check = "";	$username = &$this->data['username']; $uid_check = "";
if($this->data['uid']) { $uid_check = " AND uid!='{$this->data['uid']}'";	if($this->data['uid']) { $uid_check = " AND uid!='{$this->data['uid']}'";
} $query = $db->simple_select("users", "COUNT(uid) AS count", "LOWER(username)='".$db->escape_string(strtolower(trim($username)))."'{$uid_check}");	} $query = $db->simple_select("users", "COUNT(uid) AS count", "LOWER(username)='".$db->escape_string(strtolower(trim($username)))."'{$uid_check}");
$user_count = $db->fetch_field($query, "count"); if($user_count > 0) { $this->set_error("username_exists", array($username)); return true;	$user_count = $db->fetch_field($query, "count"); if($user_count > 0) { $this->set_error("username_exists", array($username)); return true;
}	}
else { return false;	else { return false;
Zeile 160	Zeile 160
/** * Verifies if a new password is valid or not.	/** * Verifies if a new password is valid or not.
* * @return boolean True when valid, false when invalid.	* * @return boolean True when valid, false when invalid.
*/ function verify_password() {	*/ function verify_password() {
Zeile 183	Zeile 183
// First, see if there is one or more complex character(s) in the password. if(!preg_match("/^.(?=.{".$mybb->settings['minpasswordlength'].",})(?=.\d)(?=.[a-z])(?=.[A-Z]).*$/", $user['password'])) {	// First, see if there is one or more complex character(s) in the password. if(!preg_match("/^.(?=.{".$mybb->settings['minpasswordlength'].",})(?=.\d)(?=.[a-z])(?=.[A-Z]).*$/", $user['password'])) {
$this->set_error('no_complex_characters');	$this->set_error('no_complex_characters', array($mybb->settings['minpasswordlength']));
return false; } }	return false; } }
Zeile 196	Zeile 196
} // MD5 the password	} // MD5 the password
$user['md5password'] = md5($user['password']);	$user['md5password'] = md5($user['password']);
// Generate our salt $user['salt'] = generate_salt(); // Combine the password and salt $user['saltedpw'] = salt_password($user['md5password'], $user['salt']);	// Generate our salt $user['salt'] = generate_salt(); // Combine the password and salt $user['saltedpw'] = salt_password($user['md5password'], $user['salt']);

// Generate the user login key $user['loginkey'] = generate_loginkey();	// Generate the user login key $user['loginkey'] = generate_loginkey();
Zeile 212	Zeile 212
/** * Verifies usergroup selections and other group details.	/** * Verifies usergroup selections and other group details.
* * @return boolean True when valid, false when invalid. */	* * @return boolean True when valid, false when invalid. */
function verify_usergroup() { $user = &$this->data;	function verify_usergroup() { $user = &$this->data;
Zeile 249	Zeile 249
if(is_banned_email($user['email'], true)) { $this->set_error('banned_email');	if(is_banned_email($user['email'], true)) { $this->set_error('banned_email');
return false;	return false;
}	}

// Check signed up emails // Ignore the ACP because the Merge System sometimes produces users with duplicate email addresses (Not A Bug) if($mybb->settings['allowmultipleemails'] == 0 && !defined("IN_ADMINCP"))	// Check signed up emails // Ignore the ACP because the Merge System sometimes produces users with duplicate email addresses (Not A Bug) if($mybb->settings['allowmultipleemails'] == 0 && !defined("IN_ADMINCP"))
Zeile 261	Zeile 261