Bug tracker

This ticket has been moved to our new tracker. Open Ticket PHPBB3-6730 now.

Registration username check against the Word Censor is incorrect (fix completed in vcs)

I initially reported the issue here http://www.phpbb.com/community/viewtopi ... 5#p3591305

The check done at registration time of the username against the Word Censor table is doing a partial string match and not a word match.

As a result registrations are being denied because the username contains a partial string that matches a "word" in the Word Censor Table.

The problem statement is in funtions_user.php
if (preg_match('#(' . str_replace('\*', '.*?', preg_quote($row['word'], '#')) . ')#i', $username))

My own feeling on this is that registration should not check the Word table anyway (it is supposed to be a posting function) - particularly as the disallow usernames function allows the entry of words with leading and trailing wildcards.

Comments / History

Assigned ticket to user "Acyd Burn"

Action performed by Acyd Burn (Server Manager) on Dec 27th 2007, 16:02

Changed ticket status from "New" to "Fix in progress"

Action performed by Acyd Burn (Server Manager) on Jan 3rd 2008, 17:11

Linked ticket with changeset: r8306

Action performed by Anonymous (I am too lazy to register) on Jan 5th 2008, 16:10

Changed ticket status from "Fix in progress" to "Fix completed in CVS"

Action performed by Acyd Burn (Server Manager) on Jan 6th 2008, 14:12

Ticket details

Related SVN changesets