8
Here are the character sets allowed in usernames, from register.php:
$strict = 'a-zA-Z0-9_-';
$medium = $strict."<>,.$%#@!'"";
$loose = $medium."?{}[]()^&*`~;:\+=";
There's also a separate check that appears to exclude spaces:
if ( strrpos($uname,' ') > 0 ) {
$stop .= _US_NICKNAMENOSPACES."
";
}
When I get ready to use XOOPS on my site, I'll probably tweak that a bit. I'll add a line of code to "squash" multiple spaces, add "." and " " (space) to $strict, and remove the extra check for spaces.