From 98d2433620fe4770fa409c28dd25e468d4438a49 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=A5=81=E5=AE=81?= <magike.net@gmail.com>
Date: Mon, 10 Mar 2014 21:31:07 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=AD=A3=E7=94=A8=E6=88=B7=E6=B3=A8?=
 =?UTF-8?q?=E5=86=8C=E6=B2=A1=E6=9C=89=E8=BF=87=E6=BB=A4=E7=94=A8=E6=88=B7?=
 =?UTF-8?q?=E5=90=8D=EF=BC=8C=E5=AF=BC=E8=87=B4=E7=9A=84xss=E5=AD=98?=
 =?UTF-8?q?=E5=82=A8=E5=9E=8B=E6=BC=8F=E6=B4=9E?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 var/Widget/Login.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/var/Widget/Login.php b/var/Widget/Login.php
index d3de316c..6117b2c9 100644
--- a/var/Widget/Login.php
+++ b/var/Widget/Login.php
@@ -37,6 +37,7 @@ class Widget_Login extends Widget_Abstract_Users implements Widget_Interface_Do
         /** 初始化验证类 */
         $validator = new Typecho_Validate();
         $validator->addRule('name', 'required', _t('请输入用户名'));
+        $validator->addRule('name', 'xssCheck', _t('请不要使用特殊字符'));
         $validator->addRule('password', 'required', _t('请输入密码'));
 
         /** 截获验证异常 */