# This patch file was generated by NetBeans IDE # This patch can be applied using context Tools: Apply Diff Patch action on respective folder. # It uses platform neutral UTF-8 encoding. # Above lines and this line are ignored by the patching process. --- administrator/components/com_comprofiler/plugin.class.php +++ administrator/components/com_comprofiler/plugin.class.php @@ -1087,7 +1087,10 @@ // treats case of ',,' or ',,,' to also forbid ',' if in string. $forbiddenContent[] = ','; } - $replaced = str_replace( $forbiddenContent, '', $value ); + for ( $i = 0, $n = count( $forbiddenContent ); $i < $n; $i++ ) { + $forbiddenContent[$i] = preg_quote( $forbiddenContent[$i], '/' ); + } + $replaced = preg_replace( '/' . implode( '|', $forbiddenContent ) . '/i', '', $value ); if ( $replaced != $value ) { $this->_setValidationError( $field, $user, $reason, _UE_INPUT_VALUE_NOT_ALLOWED ); return false;