--- fenglin/bbs/ch_username_sub.php	2004/12/05 10:00:19	1.3
+++ fenglin/bbs/ch_username_sub.php	2013/01/05 13:44:28	1.5
@@ -11,16 +11,16 @@ if ($_SESSION["BBS_uid"]==0)
 } 
 
 $permit = false;
-if (ereg("^[A-Za-z]{3,12}$",$_SESSION["BBS_username"]))
+if (preg_match("/^[A-Za-z]{3,12}$/",$_SESSION["BBS_username"]))
 {
 	error_msg ("您无权修改用户名！", true);
 	exit();
 }
 
-$username=htmlspecialchars(trim($_POST["username"]));
+$username=htmlspecialchars(trim($_POST["username"]), ENT_COMPAT | ENT_HTML401, 'GB2312');
 $username=addslashes($username);
 
-if (!ereg("^[A-Za-z]{5,12}$",$username))
+if (!preg_match("/^[A-Za-z]{5,12}$/",$username))
 {
 	error_msg ("用户名填写不正确！", true);
 	exit();