MyBB Community Forums

It seems there are blank characters not being detected and stripped off of usernames, thus users are able to mask their usernames to look similar to usernames from other users.

Some example is the following :
https://www.fileformat.info/info/unicode...f/list.htm

We currently make some verifications or cleanup on trim_blank_chrs() in the verify_username() method but it seems to be lacking by now.

Hi,

Thank you for your report. We have pushed this issue to our Github repository for further analysis where you can track our commits and progress with fixing this bug. Discussions regarding this bug may also take place there too.

Follow this link to visit the issue on Github: https://github.com/mybb/mybb/issues/4777

Thanks for contributing to MyBB!

Regards,
The MyBB Group