mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-04 21:57:51 +02:00
Code Issues Releases Wiki Activity

Add extra check

Browse Source
This commit is contained in:
e107steved
2008-10-19 21:17:58 +00:00
parent 4c69e0ca30
commit 36b13cb42a
1 changed files with 23 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
usersettings.php
View File

@@ -11,8 +11,8 @@
| GNU General Public License (http://gnu.org). | GNU General Public License (http://gnu.org).
| |
| $Source: /cvs_backup/e107_0.8/usersettings.php,v $ | $Source: /cvs_backup/e107_0.8/usersettings.php,v $
| $Revision: 1.25 $ | $Revision: 1.26 $
| $Date: 2008-06-13 20:20:20 $ | $Date: 2008-10-19 21:13:58 $
| $Author: e107steved $ | $Author: e107steved $
+----------------------------------------------------------------------------+ +----------------------------------------------------------------------------+
@@ -377,25 +377,28 @@ if (isset($_POST['updatesettings']))
} }
} }
foreach($_POST['ue'] as $key => $val) foreach($_POST['ue'] as $key => $val)
{ {
$err = $ue->user_extended_validate_entry($val,$extList[$key]); if (isset($extList[$key]))
if($err === TRUE && !$_uid) { // Only allow valid keys
{ // General error - usually empty field; could be unacceptable value, or regex fail and no error message defined $err = $ue->user_extended_validate_entry($val,$extList[$key]);
$error .= LAN_SIGNUP_6.($tp->toHtml($extList[$key]['user_extended_struct_text'],FALSE,"defs"))." ".LAN_SIGNUP_7."\\n"; if($err === TRUE && !$_uid)
{ // General error - usually empty field; could be unacceptable value, or regex fail and no error message defined
$error .= LAN_SIGNUP_6.($tp->toHtml($extList[$key]['user_extended_struct_text'],FALSE,"defs"))." ".LAN_SIGNUP_7."\\n";
}
elseif ($err)
{ // Specific error message returned - usually regex fail
$error .= $err."\\n";
$err = TRUE;
}
if(!$err)
{
$val = $tp->toDB($val);
$ue_fields .= ($ue_fields) ? ", " : "";
$ue_fields .= $key."='".$val."'";
}
} }
elseif ($err) }
{ // Specific error message returned - usually regex fail
$error .= $err."\\n";
$err = TRUE;
}
if(!$err)
{
$val = $tp->toDB($val);
$ue_fields .= ($ue_fields) ? ", " : "";
$ue_fields .= $key."='".$val."'";
}
}
} }