diff --git a/myaccount.php b/myaccount.php index 340ead9..51c645c 100644 --- a/myaccount.php +++ b/myaccount.php @@ -97,6 +97,17 @@ if (!empty($_POST['change_name'])) { $error = true; } } + // Check name for illegal characters. + function checkNewNameForIllegal($name) { + if (preg_match('#^[\0-9åäö&()+%/*$€é,.\'"-]*$#i', $name)) { + return true; + } + return false; + } + if (checkNewNameForIllegal($newname)) { + $error = true; + echo 'This name contains illegal characters.'; + } if ($error === false) { // Change the name! mysql_update("UPDATE `players` SET `name`='$newname' WHERE `id`='".$player['id']."' LIMIT 1;"); @@ -359,4 +370,4 @@ if (!empty($_POST['selected_comment'])) { \ No newline at end of file +include 'layout/overall/footer.php'; ?>