Only allow numbers and letters in the username

git-svn-id: http://svn.automattic.com/wordpress-mu/trunk@400 7be80a69-a1ef-0310-a953-fb0f7c49ff36

1 files changed, 4 insertions, 0 deletions

diff --git a/wp-inst/wp-newblog.php b/wp-inst/wp-newblog.php
index 8ecba63..af79611 100644
--- a/wp-inst/wp-newblog.php
+++ b/wp-inst/wp-newblog.php
@@ -142,6 +142,10 @@ switch( $_POST[ 'stage' ] )
 	}
 
 	$newBlogID = sanitize_title($_POST['weblog_id']);
+	preg_match( "/[a-zA-Z0-9]+/", $newBlogID, $maybe );
+	if( $newBlogID != $maybe[0] ) {
+	    $errormsg[ 'weblog_id' ] = "Only letters and numbers allowed";
+	}
 	if( in_array( $newBlogID, $illegal_names ) == true ) {
 	    $errormsg[ 'weblog_id' ] = "That name is not allowed";
 	}