Merge pull request #96 from cornex1/patch-2

Fix #79 Fixed illegal string filter on name change
This commit is contained in:
Stefan A. Brannfjell 2014-05-08 10:04:21 +02:00
commit 02179065f3

View File

@ -97,6 +97,17 @@ if (!empty($_POST['change_name'])) {
$error = true;
}
}
// Check name for illegal characters.
function checkNewNameForIllegal($name) {
if (preg_match('#^[\0-9åäö&()+%/*$€é,.\'"-]*$#i', $name)) {
return true;
}
return false;
}
if (checkNewNameForIllegal($newname)) {
$error = true;
echo 'This name contains illegal characters.';
}
if ($error === false) {
// Change the name!
mysql_update("UPDATE `players` SET `name`='$newname' WHERE `id`='".$player['id']."' LIMIT 1;");
@ -359,4 +370,4 @@ if (!empty($_POST['selected_comment'])) {
</div>
<?php
}
include 'layout/overall/footer.php'; ?>
include 'layout/overall/footer.php'; ?>