# [#30586] Usernames that should not be accepted can be actualy

smz · infograf768 · commit 1f0fdbe6f26d · 2013-10-07T18:46:03.000+02:00
registered. Thanks Sergio Manzi (Fix #1787)
diff --git a/installation/CHANGELOG b/installation/CHANGELOG
@@ -27,6 +27,7 @@ $ -> Language fix or change
 
 07-Oct-2013 Jean-Marie Simonet
  # [#32199] *Allow username edit in profile edit when username is not compliant. Thanks Achal Aggarwal
+ # [#30586] Usernames that should not be accepted can be actualy registered. Thanks Sergio Manzi
 
 07-Oct-2013 Roberto Segura
  # 06-Oct-2013 Fix broken install after [#31602]. Thanks Michael Babker
diff --git a/libraries/joomla/table/user.php b/libraries/joomla/table/user.php
@@ -186,7 +186,7 @@ public function check()
 			return false;
 		}
 
-		if (preg_match("#[<>\"'%;()&]#i", $this->username) || strlen(utf8_decode($this->username)) < 2)
+		if (preg_match('#[<>"\'%;()&\\s\\\\]|\\.\\./#', $this->username) || strlen(utf8_decode($this->username)) < 2)
 		{
 			$this->setError(JText::sprintf('JLIB_DATABASE_ERROR_VALID_AZ09', 2));
 

Original file line number	Diff line number	Diff line change
`@@ -186,7 +186,7 @@ public function check()`
`186`	`186`	`return false;`
`187`	`187`	`}`
`188`	`188`
`189`		`- if (preg_match("#[<>\"'%;()&]#i", $this->username) \|\| strlen(utf8_decode($this->username)) < 2)`
	`189`	`+ if (preg_match('#[<>"\'%;()&\\s\\\\]\|\\.\\./#', $this->username) \|\| strlen(utf8_decode($this->username)) < 2)`
`190`	`190`	`{`
`191`	`191`	`$this->setError(JText::sprintf('JLIB_DATABASE_ERROR_VALID_AZ09', 2));`
`192`	`192`