diff --git a/register.php b/register.php index dbf6907..c38c59a 100644 --- a/register.php +++ b/register.php @@ -37,13 +37,16 @@ if (empty($_POST) === false) { $errors[] = 'This account name is blocked for registration.'; } if ($config['ServerEngine'] !== 'OTHIRE' && $config['client'] >= 830) { - if (preg_match("/^[a-zA-Z0-9]+$/", $_POST['username']) == false) { - $errors[] = 'Your account name can only contain characters a-z, A-Z and 0-9.'; - } + if (preg_match("/^[a-zA-Z0-9]+$/", $_POST['username']) == false) { + $errors[] = 'Your account name can only contain characters a-z, A-Z and 0-9.'; + } } else { - if (preg_match("/^[0-9]+$/", $_POST['username']) == false) { - $errors[] = 'Your account can only contain numbers 0-9.'; - } + if (preg_match("/^[0-9]+$/", $_POST['username']) == false) { + $errors[] = 'Your account can only contain numbers 0-9.'; + } + if ((int)$_POST['username'] < 100000 || (int)$_POST['username'] > 999999999) { + $errors[] = 'Your account number must be a value between 6-8 numbers long.'; + } } // name restriction $resname = explode(" ", $_POST['username']);