diff --git a/wp-register.php b/wp-register.php
index 61f21bbea..12ed55c30 100644
--- a/wp-register.php
+++ b/wp-register.php
@@ -1,5 +1,5 @@
$v) {
@@ -42,10 +42,6 @@ switch($action) {
case 'register':
- function filter($value) {
- return ereg('^[a-zA-Z0-9\_-\|]+$',$value);
- }
-
$user_login = $_POST['user_login'];
$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];
@@ -81,19 +77,19 @@ case 'register':
}
$user_ip = $_SERVER['REMOTE_ADDR'] ;
- $user_domain = gethostbyaddr($_SERVER['REMOTE_ADDR'] );
- $user_browser = addslashes($_SERVER['HTTP_USER_AGENT']);
- $user_login = addslashes($user_login);
- $pass1 = addslashes($pass1);
- $user_nickname = addslashes($user_nickname);
+ $user_browser = $wpdb->escape($_SERVER['HTTP_USER_AGENT']);
+
+ $user_login = $wpdb->escape($user_login);
+ $pass1 = $wpdb->escape($pass1);
+ $user_nickname = $wpdb->escape($user_nickname);
$now = gmdate('Y-m-d H:i:s');
$new_users_can_blog = get_settings('new_users_can_blog');
$result = $wpdb->query("INSERT INTO $tableusers
- (user_login, user_pass, user_nickname, user_email, user_ip, user_domain, user_browser, dateYMDhour, user_level, user_idmode)
+ (user_login, user_pass, user_nickname, user_email, user_ip, user_browser, dateYMDhour, user_level, user_idmode)
VALUES
- ('$user_login', MD5('$pass1'), '$user_nickname', '$user_email', '$user_ip', '$user_domain', '$user_browser', '$now', '$new_users_can_blog', 'nickname')");
+ ('$user_login', MD5('$pass1'), '$user_nickname', '$user_email', '$user_ip', '$user_browser', '$now', '$new_users_can_blog', 'nickname')");
if ($result == false) {
die (sprintf(__('ERROR: Couldn’t register you... please contact the webmaster !'), get_settings('admin_email')));
@@ -112,7 +108,7 @@ case 'register':
- <?php _e('WordPress » Registration Complete') ?>
+ WordPress » <?php _e('Registration Complete') ?>
@@ -140,7 +136,7 @@ case 'disabled':
- <?php _e('WordPress » Registration Currently Disabled') ?>
+ WordPress » <?php _e('Registration Currently Disabled') ?>
@@ -166,7 +162,7 @@ default:
- <?php _e('WordPress » Registration Form') ?>
+ WordPress » <?php _e('Registration Form') ?>
@@ -192,4 +188,4 @@ default:
break;
}
-?>
+?>
\ No newline at end of file