From c0b27133d328028490d81be8ec96b7638c86fb0a Mon Sep 17 00:00:00 2001 From: Mischa POSLAWSKY Date: Tue, 19 Jun 2018 19:02:52 +0200 Subject: [PATCH] login/edit: prepare input restriction for user names Indicate validity even though it cannot be altered yet. --- login/edit.php | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/login/edit.php b/login/edit.php index 017a562..4002cb9 100644 --- a/login/edit.php +++ b/login/edit.php @@ -45,7 +45,12 @@ foreach ($cols as $col => &$colconf) { } $cols = [ - 'login' => ['label' => 'login', 'value' => $user['name'], 'target' => NULL], + 'login' => [ + 'label' => 'login', + 'value' => $user['name'], + 'target' => NULL, + 'pattern' => "[a-z0-9-]+", + ], ] + $cols; if (isset($user['pass'])) { @@ -159,6 +164,7 @@ foreach ($cols as $col => &$colconf) { 'value' => htmlspecialchars(@$colconf['value']), 'placeholder' => "Niet ingesteld", 'readonly' => empty($colconf['target']), + 'pattern' => @$colconf['pattern'] ?: FALSE, ]; if (@$colconf['type'] == 'file') { $attrs['accept'] = "image/jpeg"; -- 2.30.0