[21219] Fixing CVE-2010-0404, update the CHANGELOG, prepare the already done 16.016 release
Caeies <[email protected]> Wed, 02 Jun 2010 09:22:22 +0000
| Newsgroups | gmane.comp.web.phpgroupware.cvs |
|---|---|
| Message-ID | <[email protected]> |
Revision: 21219
http://svn.sv.gnu.org/viewvc/?view=rev&root=phpgroupware&revision=21219
Author: Caeies
Date: 2010-06-02 09:22:22 +0000 (Wed, 02 Jun 2010)
Log Message:
-----------
Fixing CVE-2010-0404, update the CHANGELOG, prepare the already done 16.016 release
Modified Paths:
--------------
modules/admin/branches/branch_0_9_16/inc/class.boaccounts.inc.php
Modified: modules/admin/branches/branch_0_9_16/inc/class.boaccounts.inc.php
===================================================================
--- modules/admin/branches/branch_0_9_16/inc/class.boaccounts.inc.php 2010-06-02 09:21:59 UTC (rev 21218)
+++ modules/admin/branches/branch_0_9_16/inc/class.boaccounts.inc.php 2010-06-02 09:22:22 UTC (rev 21219)
@@ -715,7 +715,11 @@
$error[$totalerrors] = lang('You must enter a loginid');
$totalerrors++;
}
-
+ if(!sanitize($_userData['account_lid'], 'alphanumeric'))
+ {
+ $error[$totalerrors] = lang('The login should be alphanumeric only!');
+ $totalerrors++;
+ }
if ($_userData['old_loginid'] != $_userData['account_lid'])
{
if ($GLOBALS['phpgw']->accounts->exists($_userData['account_lid']))