xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-25 04:27:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: disallow Natars user registration

Browse Source 
#382
This commit is contained in:
Martin Ambrus
2017-11-26 16:55:37 +01:00
parent ef416cd548
commit d3b51a34ec
3 changed files with 17 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Account.php
+3
View File
@@ -75,6 +75,9 @@ class Account {
else if(USRNM_SPECIAL && preg_match("/[:,\\. \\n\\r\\t\\s\\<\\>]+/", $_POST['name'])) { else if(USRNM_SPECIAL && preg_match("/[:,\\. \\n\\r\\t\\s\\<\\>]+/", $_POST['name'])) {
$form->addError("name",USRNM_CHAR); $form->addError("name",USRNM_CHAR);
} }
else if(strtolower($_POST['name']) == 'natars') {
$form->addError("name",USRNM_TAKEN);
}
else if(User::exists($database,$_POST['name'])) { else if(User::exists($database,$_POST['name'])) {
$form->addError("name",USRNM_TAKEN); $form->addError("name",USRNM_TAKEN);
} }
install/include/accounts.php
+6
View File
@@ -5,6 +5,12 @@
exit; exit;
} }
// don't allow creating Natars user
if (!empty($_POST['aname']) && strtolower($_POST['aname']) == 'natars') {
header("Location: ../index.php?s=4&err=2");
exit;
}
// don't let SQL time out when 30-500 seconds (depending on php.ini) is not enough // don't let SQL time out when 30-500 seconds (depending on php.ini) is not enough
@set_time_limit(0); @set_time_limit(0);
install/templates/accounts.tpl
+4
View File
@@ -19,6 +19,10 @@ if(isset($_GET['err']) && $_GET['err'] == 1) {
echo "<br /><hr /><br /><div class=\"headline\"><span class=\"f10 c5\">At least MultiHunter &amp; Support password are required in this form.</span></div><br /><br />"; echo "<br /><hr /><br /><div class=\"headline\"><span class=\"f10 c5\">At least MultiHunter &amp; Support password are required in this form.</span></div><br /><br />";
} }
if(isset($_GET['err']) && $_GET['err'] == 2) {
echo "<br /><hr /><br /><div class=\"headline\"><span class=\"f10 c5\">Natars is a reserved username for an in-game NPC tribe. Please choose a different admin username.</span></div><br /><br />";
}
?> ?>
<form action="include/accounts.php" method="post" id="dataform"> <form action="include/accounts.php" method="post" id="dataform">