[Tikiwiki-cvs/svn] SF.net SVN: tikiwiki:[33597] branches/proposals/6.x

[<nk...@us...>]

Revision: 33597
          http://tikiwiki.svn.sourceforge.net/tikiwiki/?rev=33597&view=rev
Author:   nkoth
Date:     2011-03-23 20:55:59 +0000 (Wed, 23 Mar 2011)

Log Message:
-----------
[FIX][bp/r33596] Prevent usernames with stripped words such as "onstop" from not being able to login

Modified Paths:
--------------
    branches/proposals/6.x/tiki-login.php
    branches/proposals/6.x/tiki-login_validate.php

Modified: branches/proposals/6.x/tiki-login.php
===================================================================
--- branches/proposals/6.x/tiki-login.php	2011-03-23 20:54:30 UTC (rev 33596)
+++ branches/proposals/6.x/tiki-login.php	2011-03-23 20:55:59 UTC (rev 33597)
@@ -4,6 +4,13 @@
 // All Rights Reserved. See copyright.txt for details and a complete list of authors.
 // Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
 // $Id$
+$inputConfiguration = array(
+	array( 'staticKeyFilters' => array(
+		'user' => 'text',
+		'username' => 'text',
+		'pass' => 'text',
+	) )
+);
 
 $bypass_siteclose_check = 'y';
 require_once ('tiki-setup.php');

Modified: branches/proposals/6.x/tiki-login_validate.php
===================================================================
--- branches/proposals/6.x/tiki-login_validate.php	2011-03-23 20:54:30 UTC (rev 33596)
+++ branches/proposals/6.x/tiki-login_validate.php	2011-03-23 20:55:59 UTC (rev 33597)
@@ -4,6 +4,11 @@
 // All Rights Reserved. See copyright.txt for details and a complete list of authors.
 // Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
 // $Id$
+$inputConfiguration = array(
+	array( 'staticKeyFilters' => array(
+		'user' => 'text',
+	) )
+);
 
 require_once ('tiki-setup.php');
 $access->check_feature(array('validateUsers','validateRegistration'), '', 'login', true);


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.