From 0499d588629b5fb0f8efeec5043170ecfae92200 Mon Sep 17 00:00:00 2001
From: Martin Ambrus <martin@martinambrus.com>
Date: Fri, 24 Nov 2017 10:24:41 +0100
Subject: [PATCH] fix: disable hack-registering as non-existing or NPC tribe

---
 GameEngine/Account.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/GameEngine/Account.php b/GameEngine/Account.php
index bca28091..85a09ebd 100755
--- a/GameEngine/Account.php
+++ b/GameEngine/Account.php
@@ -103,7 +103,7 @@ class Account {
 				$form->addError("email",EMAIL_TAKEN);
 			}
 		}
-		if(!isset($_POST['vid'])) {
+		if(!isset($_POST['vid']) || !in_array($_POST['vid'], [1, 2, 3])) {
 			$form->addError("tribe",TRIBE_EMPTY);
 		}
 		if(!isset($_POST['agb'])) {