mirror/litebans-php
1
0
Fork 0
mirror of https://gitlab.com/ruany/litebans-php.git synced 2025-05-23 16:32:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Validate user input

Browse Source
This commit is contained in:
Ruan 2015-06-08 17:44:53 +02:00
parent 07b3a63f33
commit 0848871c67
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
check.php
View File

@ -1,7 +1,13 @@
<?php <?php
if (isset($_POST['name'], $_POST['table'])) { if (isset($_POST['name'], $_POST['table'])) {
require 'includes/page.php'; require 'includes/page.php';
$name = $_POST['name']; // user input $name = $_POST['name'];
// validate user input
if (strlen($name) > 16 || !preg_match("/[0-9a-zA-Z_]/", $name)) {
echo('Invalid name.');
return;
}
global $table_bans, $table_history, $conn; global $table_bans, $table_history, $conn;
$stmt = $conn->prepare("SELECT name,uuid FROM " . $table_history . " WHERE name=? ORDER BY date LIMIT 1"); $stmt = $conn->prepare("SELECT name,uuid FROM " . $table_history . " WHERE name=? ORDER BY date LIMIT 1");
if ($stmt->execute(array($name))) { if ($stmt->execute(array($name))) {