Beanz/flatpress
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

admin skips input validation

Browse Source
This commit is contained in:
real_nowhereman 2008-03-19 13:46:29 +00:00
parent e61031f5b2
commit e61df38f90
1 changed files with 39 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

74
comments.php
View File

@ -89,47 +89,56 @@
$errors = array(); $errors = array();
/* $loggedin = false;
* check name
* if (user_loggedin()) {
*/ $loggedin = $arr['loggedin']=true;
} else {
if (!$name) {
$errors['name'] = $lerr['name'];
}
/*
/* * check name
* check email *
* */
*/
if ($email) { if (!$name) {
$_is_valid = !(preg_match('!@.*@|\.\.|\,|\;!', $email) || $errors['name'] = $lerr['name'];
!preg_match('!^.+\@(\[?)[a-zA-Z0-9\.\-]+\.([a-zA-Z]{2,4}|[0-9]{1,3})(\]?)$!', $email)); }
if (!$_is_valid) { /*
$errors['email'] = $lerr['email']; * check email
*
*/
if ($email) {
$_is_valid = !(preg_match('!@.*@|\.\.|\,|\;!', $email) ||
!preg_match('!^.+\@(\[?)[a-zA-Z0-9\.\-]+\.([a-zA-Z]{2,4}|[0-9]{1,3})(\]?)$!', $email));
if (!$_is_valid) {
$errors['email'] = $lerr['email'];
}
} }
} /*
* check url
/* *
* check url */
*
*/ if ($url) {
if (!preg_match('!^http(s)?://[\w-]+\.[\w-]+(\S+)?$!i', $url)) {
if ($url) { // || preg_match('!^http(s)?://localhost!', $value);
if (!preg_match('!^http(s)?://[\w-]+\.[\w-]+(\S+)?$!i', $url)) { $errors['url'] = $lerr['www'];
// || preg_match('!^http(s)?://localhost!', $value); }
$errors['url'] = $lerr['www'];
} }
} }
if (!$content) { if (!$content) {
$errors['content'] = $lerr['comment']; $errors['content'] = $lerr['comment'];
} }
if ($errors) { if ($errors) {
$smarty->assign('error', $errors); $smarty->assign('error', $errors);
@ -139,11 +148,6 @@
$arr['version'] = system_ver(); $arr['version'] = system_ver();
$arr['name'] = $_POST['name']; $arr['name'] = $_POST['name'];
$loggedin = false;
if (user_loggedin()) {
$loggedin = $arr['loggedin']=true;
}
if (!$loggedin) if (!$loggedin)
setcookie('comment_author_' . COOKIEHASH, setcookie('comment_author_' . COOKIEHASH,