* (bug 9223) Disallow magic tilde sequences in page titles and usernames

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 095a89a..ffb721c 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -254,6 +254,8 @@ lighter making things easier to read.
 * (bug 9217) Balance wfProfile calls in Skin::outputPage
 * (bug 9222) PostgreSQL updater should not be version-specific
 * (bug 1723) Article size in history
+* (bug 9223) Disallow magic tilde sequences in page titles and usernames
+
 
 == Languages updated ==
 

diff --git a/includes/Title.php b/includes/Title.php
index c40b6e6..15b5fb5 100644 (file)
--- a/includes/Title.php
+++ b/includes/Title.php
@@ -1824,6 +1824,13 @@ class Title {
                {
                        return false;
                }
+               
+               /**
+                * Magic tilde sequences? Nu-uh!
+                */
+               if( strpos( $dbkey, '~~~' ) !== false ) {
+                       return false;
+               }
 
                /**
                 * Limit the size of titles to 255 bytes.