www/adiumxtras.com 34:e2dc6efe25e1: If a spambot fills in the hi...

commits at adium.im commits at adium.im
Fri Dec 2 18:19:19 UTC 2011


details:	http://hg.adium.im/www/adiumxtras.com/rev/e2dc6efe25e1
revision:	34:e2dc6efe25e1
branch:		adiumxtras.com
author:		Zachary West <zacw at adium.im>
date:		Fri Dec 02 13:19:14 2011 -0500

If a spambot fills in the hidden 'username' field for login, just pretend nothing happened.

diffs (14 lines):

diff -r 4425cadd2860 -r e2dc6efe25e1 users.php
--- a/users.php	Fri Dec 02 13:16:25 2011 -0500
+++ b/users.php	Fri Dec 02 13:19:14 2011 -0500
@@ -165,6 +165,10 @@
 		break;
 		
 		case "create_account":
+			if(strlen($_POST['username'])) {
+				exit();
+			}
+		
 			$username = mysql_escape_string(trim(strip_tags($_POST['banana'])));
 			$password1 = strip_tags($_POST['password1']);
 			$password2 = strip_tags($_POST['password2']);




More information about the commits mailing list