Add extra check

usersettings.php

@@ -11,8 +11,8 @@
 |     GNU General Public License (http://gnu.org).
 |
 |     $Source: /cvs_backup/e107_0.8/usersettings.php,v $
-|     $Revision: 1.25 $
-|     $Date: 2008-06-13 20:20:20 $
+|     $Revision: 1.26 $
+|     $Date: 2008-10-19 21:13:58 $
 |     $Author: e107steved $
 +----------------------------------------------------------------------------+
 
@@ -379,6 +379,8 @@ if (isset($_POST['updatesettings']))
 
 		foreach($_POST['ue'] as $key => $val)
 		{
+			if (isset($extList[$key]))
+			{	// Only allow valid keys
 				$err = $ue->user_extended_validate_entry($val,$extList[$key]);
 				if($err === TRUE && !$_uid)
 				{  // General error - usually empty field; could be unacceptable value, or regex fail and no error message defined
@@ -397,6 +399,7 @@ if (isset($_POST['updatesettings']))
 				}
 			}
 		}
+    }
 
 
 	unset($_POST['password1']);		// Always clear the password fields - value noted if required