From 3a11c693b7ab6bd2a09be9870785dd0f3932ebef Mon Sep 17 00:00:00 2001
From: nacin <nacin@1a063a9b-81f0-0310-95a4-ce76da25c4cd>
Date: Wed, 28 Apr 2010 02:17:19 +0000
Subject: [PATCH] Show the sanitized username on install.php completion page.
 Also add some help text. see #13159.

git-svn-id: http://svn.automattic.com/wordpress/trunk@14264 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-admin/install.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/wp-admin/install.php b/wp-admin/install.php
index 5fa3780572..93a9148071 100644
--- a/wp-admin/install.php
+++ b/wp-admin/install.php
@@ -104,7 +104,9 @@ function display_setup_form( $error = null ) {
 			if ( $user_table ) {
 				_e('User(s) already exists.');
 			} else {
-				?><input name="user_name" type="text" id="user_login" size="25" value="<?php echo esc_attr( $user_name ); ?>" /><?php
+				?><input name="user_name" type="text" id="user_login" size="25" value="<?php echo esc_attr( sanitize_user( $user_name, true ) ); ?>" />
+				<p><?php _e( 'Usernames can have only alphanumeric characters, spaces, underscores, hyphens, periods and the @ symbol.' ); ?></p>
+			<?php
 			} ?>
 			</td>
 		</tr>
@@ -218,7 +220,7 @@ switch($step) {
 <table class="form-table">
 	<tr>
 		<th><?php _e( 'Username' ); ?></th>
-		<td><code><?php echo esc_html($user_name); ?></code></td>
+		<td><code><?php echo esc_html( sanitize_user( $user_name, true ) ); ?></code></td>
 	</tr>
 	<tr>
 		<th><?php _e( 'Password' ); ?></th>