1
0
mirror of https://github.com/e107inc/e107.git synced 2025-08-03 21:27:25 +02:00

Add extra check

This commit is contained in:
e107steved
2008-10-19 21:17:58 +00:00
parent 4c69e0ca30
commit 36b13cb42a

View File

@@ -11,8 +11,8 @@
| GNU General Public License (http://gnu.org). | GNU General Public License (http://gnu.org).
| |
| $Source: /cvs_backup/e107_0.8/usersettings.php,v $ | $Source: /cvs_backup/e107_0.8/usersettings.php,v $
| $Revision: 1.25 $ | $Revision: 1.26 $
| $Date: 2008-06-13 20:20:20 $ | $Date: 2008-10-19 21:13:58 $
| $Author: e107steved $ | $Author: e107steved $
+----------------------------------------------------------------------------+ +----------------------------------------------------------------------------+
@@ -379,6 +379,8 @@ if (isset($_POST['updatesettings']))
foreach($_POST['ue'] as $key => $val) foreach($_POST['ue'] as $key => $val)
{ {
if (isset($extList[$key]))
{ // Only allow valid keys
$err = $ue->user_extended_validate_entry($val,$extList[$key]); $err = $ue->user_extended_validate_entry($val,$extList[$key]);
if($err === TRUE && !$_uid) if($err === TRUE && !$_uid)
{ // General error - usually empty field; could be unacceptable value, or regex fail and no error message defined { // General error - usually empty field; could be unacceptable value, or regex fail and no error message defined
@@ -397,6 +399,7 @@ if (isset($_POST['updatesettings']))
} }
} }
} }
}
unset($_POST['password1']); // Always clear the password fields - value noted if required unset($_POST['password1']); // Always clear the password fields - value noted if required