From 0be3028c30b20c81f3a329b58f1b30706f0c8ba4 Mon Sep 17 00:00:00 2001 From: Roland Gruber Date: Sat, 10 Dec 2005 09:47:09 +0000 Subject: [PATCH] less restrictive input checks --- lam/lib/account.inc | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/lam/lib/account.inc b/lam/lib/account.inc index f05717ac..b4b5bae2 100644 --- a/lam/lib/account.inc +++ b/lam/lib/account.inc @@ -451,9 +451,6 @@ function get_preg($argument, $regexp) { case 'password': $pregexpr = '/^([[:alnum:]\\ \\|\\#\\*\\,\\.\\;\\:\\_\\+\\!\\%\\&\\/\\?\\{\\(\\)\\}-])*$/u'; break; - case 'cn': // first character must be a letter. All letters, numbers, space and @._- are allowed characters - $pregexpr = '/^[[:alpha:]]([[:alnum:]@\\.\\ \\_-])*(\\$)?$/u'; - break; case 'groupname': // first character must be a letter. All letters, numbers, space and ._- are allowed characters case 'username': // first character must be a letter. All letters, numbers, space and ._- are allowed characters $pregexpr = '/^[[:alpha:]]([[:alnum:]\\.\\ \\_-])*$/u'; @@ -466,6 +463,7 @@ function get_preg($argument, $regexp) { $pregexpr = '/^[a-zA-Z]([a-zA-Z0-9\\.\\_-])*\\$$/u'; break; case 'realname': // Allow all but \, <, >, =, $, ? + case 'cn': $pregexpr = '/^[^\\\<>=\\$\\?]+$/'; break; case "telephone": // Allow numbers, space, brackets, /-+.