mirror of
https://github.com/webmin/webmin.git
synced 2026-09-28 16:30:56 +01:00
Safer to match A-Z and a-z separately
This commit is contained in:
@@ -57,7 +57,7 @@ else {
|
||||
&error_setup($text{'save_err'});
|
||||
|
||||
# Validate username, and check for a clash
|
||||
$in{'name'} =~ /^[A-z0-9\-\_\.\@]+$/ && $in{'name'} !~ /^\@/ ||
|
||||
$in{'name'} =~ /^[A-Za-z0-9\-\_\.\@]+$/ && $in{'name'} !~ /^\@/ ||
|
||||
&error(&text('save_ename', &html_escape($in{'name'})));
|
||||
$in{'name'} eq 'webmin' && &error($text{'save_enamewebmin'});
|
||||
if (!$in{'old'} || $in{'old'} ne $in{'name'}) {
|
||||
|
||||
@@ -12,7 +12,7 @@ our ($remote_user);
|
||||
|
||||
my ($username, $reason, $remoteip, $localip) = @ARGV;
|
||||
if ($username && $reason && $remoteip) {
|
||||
$username =~ s/[^A-z0-9\-\_\.\@]/_/g;
|
||||
$username =~ s/[^A-Za-z0-9\-\_\.\@]/_/g;
|
||||
$ENV{'REMOTE_USER'} = $WebminCore::remote_user = $remote_user = $username;
|
||||
$0 = "miniserv.pl";
|
||||
&webmin_log("failed", undef, $reason, undef, "global", undef,
|
||||
|
||||
@@ -12,7 +12,7 @@ our ($remote_user);
|
||||
&init_config();
|
||||
my ($username, $sid, $remoteip, $localip) = @ARGV;
|
||||
if ($username && $sid && $remoteip) {
|
||||
$username =~ s/[^A-z0-9\-\_\.\@]/_/g;
|
||||
$username =~ s/[^A-Za-z0-9\-\_\.\@]/_/g;
|
||||
$ENV{'REMOTE_USER'} = $WebminCore::remote_user = $remote_user = $username;
|
||||
$main::session_id = $sid;
|
||||
$0 = "miniserv.pl";
|
||||
|
||||
@@ -12,7 +12,7 @@ our ($remote_user);
|
||||
&init_config();
|
||||
my ($username, $sid, $remoteip, $localip) = @ARGV;
|
||||
if ($username && $sid && $remoteip) {
|
||||
$username =~ s/[^A-z0-9\-\_\.\@]/_/g;
|
||||
$username =~ s/[^A-Za-z0-9\-\_\.\@]/_/g;
|
||||
$ENV{'REMOTE_USER'} = $WebminCore::remote_user = $remote_user = $username;
|
||||
$main::session_id = $sid;
|
||||
$0 = "miniserv.pl";
|
||||
|
||||
Reference in New Issue
Block a user