From: Mischa POSLAWSKY <perl@shiar.org>
Date: Tue, 19 Jun 2018 16:54:43 +0000 (+0200)
Subject: login: replace unsupported characters in user names
X-Git-Tag: v3.3~19
X-Git-Url: http://git.shiar.net/minimedit.git/commitdiff_plain/998ab3e183e734bcbe99c44963a960c42fccae89

login: replace unsupported characters in user names
---

diff --git a/auth.inc.php b/auth.inc.php
index 2edfa7a..030a394 100644
--- a/auth.inc.php
+++ b/auth.inc.php
@@ -24,7 +24,7 @@ function login($inuser, $inpass = NULL)
 	}
 
 	# find password data by user name
-	$userdir = 'profile/'.strtolower($inuser);
+	$userdir = 'profile/'.preg_replace('/[^a-z0-9]+/', '-', strtolower($inuser));
 	$pwfile = "$userdir/.passwd";
 	if (!file_exists($pwfile)) return;
 	$usertest = trim(file_get_contents($pwfile));