Safer to match A-Z and a-z separately
Some checks failed
Tests / prove (push) Has been cancelled
Package and upload artifacts / build (push) Has been cancelled

This commit is contained in:
Jamie Cameron
2026-09-27 20:30:59 -07:00
parent 8f79fbd0fd
commit d78dcb7625
4 changed files with 4 additions and 4 deletions

View File

@@ -57,7 +57,7 @@ else {
&error_setup($text{'save_err'});
# Validate username, and check for a clash
$in{'name'} =~ /^[A-z0-9\-\_\.\@]+$/ && $in{'name'} !~ /^\@/ ||
$in{'name'} =~ /^[A-Za-z0-9\-\_\.\@]+$/ && $in{'name'} !~ /^\@/ ||
&error(&text('save_ename', &html_escape($in{'name'})));
$in{'name'} eq 'webmin' && &error($text{'save_enamewebmin'});
if (!$in{'old'} || $in{'old'} ne $in{'name'}) {

View File

@@ -12,7 +12,7 @@ our ($remote_user);
my ($username, $reason, $remoteip, $localip) = @ARGV;
if ($username && $reason && $remoteip) {
$username =~ s/[^A-z0-9\-\_\.\@]/_/g;
$username =~ s/[^A-Za-z0-9\-\_\.\@]/_/g;
$ENV{'REMOTE_USER'} = $WebminCore::remote_user = $remote_user = $username;
$0 = "miniserv.pl";
&webmin_log("failed", undef, $reason, undef, "global", undef,

View File

@@ -12,7 +12,7 @@ our ($remote_user);
&init_config();
my ($username, $sid, $remoteip, $localip) = @ARGV;
if ($username && $sid && $remoteip) {
$username =~ s/[^A-z0-9\-\_\.\@]/_/g;
$username =~ s/[^A-Za-z0-9\-\_\.\@]/_/g;
$ENV{'REMOTE_USER'} = $WebminCore::remote_user = $remote_user = $username;
$main::session_id = $sid;
$0 = "miniserv.pl";

View File

@@ -12,7 +12,7 @@ our ($remote_user);
&init_config();
my ($username, $sid, $remoteip, $localip) = @ARGV;
if ($username && $sid && $remoteip) {
$username =~ s/[^A-z0-9\-\_\.\@]/_/g;
$username =~ s/[^A-Za-z0-9\-\_\.\@]/_/g;
$ENV{'REMOTE_USER'} = $WebminCore::remote_user = $remote_user = $username;
$main::session_id = $sid;
$0 = "miniserv.pl";