Add a prophylactic sanitize_user()

git-svn-id: https://develop.svn.wordpress.org/trunk@5683 602fd350-edb4-49c9-b593-d223f7449a82

wp-includes/pluggable.php

@@ -304,6 +304,8 @@ if ( !function_exists('wp_login') ) :
 function wp_login($username, $password, $already_md5 = false) {
 	global $wpdb, $error;
 
+	$username = sanitize_user($username);
+
 	if ( '' == $username )
 		return false;