http://www.atutor.ca/atutor/mantis/view.php?id=2615

diff --git a/docs/admin/create_user.php b/docs/admin/create_user.php
index 4c8cbe0..0c4711e 100644 (file)
--- a/docs/admin/create_user.php
+++ b/docs/admin/create_user.php
@@ -36,7 +36,7 @@ if (isset($_POST['submit'])) {
                $msg->addError('LOGIN_NAME_MISSING');\r
        } else {\r
                /* check for special characters */\r
-               if (!(eregi("^[a-zA-Z0-9_]([a-zA-Z0-9_])*$", $_POST['login']))) {\r
+               if (!(eregi("^[a-zA-Z0-9_.]([a-zA-Z0-9_.])*$", $_POST['login']))) {\r
                        $msg->addError('LOGIN_CHARS');\r
                } else {\r
                        $result = mysql_query("SELECT * FROM ".TABLE_PREFIX."members WHERE login='$_POST[login]'",$db);\r

diff --git a/docs/registration.php b/docs/registration.php
index 7af51dc..43e9eff 100644 (file)
--- a/docs/registration.php
+++ b/docs/registration.php
@@ -34,7 +34,7 @@ if (isset($_POST['cancel'])) {
                $msg->addError('LOGIN_NAME_MISSING');
        } else {
                /* check for special characters */
-               if (!(eregi("^[a-zA-Z0-9_]([a-zA-Z0-9_])*$", $_POST['login']))) {
+               if (!(eregi("^[a-zA-Z0-9_.]([a-zA-Z0-9_.])*$", $_POST['login']))) {
                        $msg->addError('LOGIN_CHARS');
                } else {
                        $result = mysql_query("SELECT * FROM ".TABLE_PREFIX."members WHERE login='$chk_login'",$db);