www/adiumxtras.com 34:e2dc6efe25e1: If a spambot fills in the hi...
commits at adium.im
commits at adium.im
Fri Dec 2 18:19:19 UTC 2011
details: http://hg.adium.im/www/adiumxtras.com/rev/e2dc6efe25e1
revision: 34:e2dc6efe25e1
branch: adiumxtras.com
author: Zachary West <zacw at adium.im>
date: Fri Dec 02 13:19:14 2011 -0500
If a spambot fills in the hidden 'username' field for login, just pretend nothing happened.
diffs (14 lines):
diff -r 4425cadd2860 -r e2dc6efe25e1 users.php
--- a/users.php Fri Dec 02 13:16:25 2011 -0500
+++ b/users.php Fri Dec 02 13:19:14 2011 -0500
@@ -165,6 +165,10 @@
break;
case "create_account":
+ if(strlen($_POST['username'])) {
+ exit();
+ }
+
$username = mysql_escape_string(trim(strip_tags($_POST['banana'])));
$password1 = strip_tags($_POST['password1']);
$password2 = strip_tags($_POST['password2']);
More information about the commits
mailing list