Beanz/flatpress
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

admin skips input validation

Browse Source
This commit is contained in:
real_nowhereman 2008-03-19 13:46:29 +00:00
parent e61031f5b2
commit e61df38f90
1 changed files with 39 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

70
comments.php
View File

@ -89,48 +89,57 @@
$errors = array();
/*
* check name
*
*/
$loggedin = false;
if (!$name) {
$errors['name'] = $lerr['name'];
}
if (user_loggedin()) {
$loggedin = $arr['loggedin']=true;
} else {
/*
* check name
*
*/
/*
* check email
*
*/
if ($email) {
$_is_valid = !(preg_match('!@.*@|\.\.|\,|\;!', $email) ||
!preg_match('!^.+\@(\[?)[a-zA-Z0-9\.\-]+\.([a-zA-Z]{2,4}|[0-9]{1,3})(\]?)$!', $email));
if (!$_is_valid) {
$errors['email'] = $lerr['email'];
if (!$name) {
$errors['name'] = $lerr['name'];
}
}
/*
* check url
*
*/
/*
* check email
*
*/
if ($email) {
$_is_valid = !(preg_match('!@.*@|\.\.|\,|\;!', $email) ||
!preg_match('!^.+\@(\[?)[a-zA-Z0-9\.\-]+\.([a-zA-Z]{2,4}|[0-9]{1,3})(\]?)$!', $email));
if (!$_is_valid) {
$errors['email'] = $lerr['email'];
}
if ($url) {
if (!preg_match('!^http(s)?://[\w-]+\.[\w-]+(\S+)?$!i', $url)) {
// || preg_match('!^http(s)?://localhost!', $value);
$errors['url'] = $lerr['www'];
}
}
/*
* check url
*
*/
if ($url) {
if (!preg_match('!^http(s)?://[\w-]+\.[\w-]+(\S+)?$!i', $url)) {
// || preg_match('!^http(s)?://localhost!', $value);
$errors['url'] = $lerr['www'];
}
}
}
if (!$content) {
$errors['content'] = $lerr['comment'];
}
if ($errors) {
$smarty->assign('error', $errors);
return false;
@ -139,11 +148,6 @@
$arr['version'] = system_ver();
$arr['name'] = $_POST['name'];
$loggedin = false;
if (user_loggedin()) {
$loggedin = $arr['loggedin']=true;
}
if (!$loggedin)
setcookie('comment_author_' . COOKIEHASH,