Bypass username min length

  • Resolved missveronica

    (@missveronicatv)


    5 years, 6 months ago

    Using characters like & and $ in the username will bypass the min length check in the plugin WPUM Username Length version 2.0.0 and you can have usernames with one character.

    m&&&& will give you a username m even if min length is set to 5.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor Alessandro Tesoro

    (@alessandrotesoro)

    Hi @missveronicatv

    Thanks for reporting the issue. A fix will be released next week.

    Thread Starter missveronica

    (@missveronicatv)

    Not resolved in WPUM Username Length Version 2.0.1 !

    The user name m&&&&& can still be registered and will become m with min username length of 5.

    PHP code in wpum-username-length/includes/actions.php line 31 should include calls to sanitize_user:

    $length = function_exists('mb_strlen') ? mb_strlen( sanitize_user( $username, true )) : strlen( sanitize_user( $username, true ));

    Thread Starter missveronica

    (@missveronicatv)

    Thanks resolved in WPUM Username Length Version 2.0.2

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Bypass username min length’ is closed to new replies.