From 6690882fc1c7236f0874025fb34e37149f990fa0 Mon Sep 17 00:00:00 2001 From: Scott Taylor Date: Thu, 25 Jun 2015 16:56:01 +0000 Subject: [PATCH] `wpmu_validate_user_signup()` should strictly check against `false` when using `strpos()`. See #32444. git-svn-id: https://develop.svn.wordpress.org/trunk@32942 602fd350-edb4-49c9-b593-d223f7449a82 --- src/wp-includes/ms-functions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/wp-includes/ms-functions.php b/src/wp-includes/ms-functions.php index bc95f8b0dd..ab561af548 100644 --- a/src/wp-includes/ms-functions.php +++ b/src/wp-includes/ms-functions.php @@ -494,7 +494,7 @@ function wpmu_validate_user_signup($user_name, $user_email) { if ( strlen( $user_name ) < 4 ) $errors->add('user_name', __( 'Username must be at least 4 characters.' ) ); - if ( strpos( ' ' . $user_name, '_' ) != false ) + if ( strpos( ' ' . $user_name, '_' ) !== false ) $errors->add( 'user_name', __( 'Sorry, usernames may not contain the character “_”!' ) ); // all numeric?