Added more descriptive error messages for three cases.

This commit is contained in:
2022-04-13 13:49:22 +02:00
parent 9bff04b518
commit 85f5824f7b
3 changed files with 12 additions and 4 deletions

View File

@@ -13,16 +13,16 @@ if (!isset($_SESSION["auth"]) || $_SESSION["auth"] != 1)
exit();
}
// We do not print any error in the next three cases, because a legitimate
// user will never produce such results, even with disabled javascript
if ( preg_match("/[^a-z0-9_-]/", $list_name) )
{
$_SESSION["error_code"] = 14;
header("Location: error.php");
exit();
}
if ( strlen($list_name) > 50 )
{
$_SESSION["error_code"] = 13;
header("Location: error.php");
exit();
}
@@ -30,6 +30,7 @@ if ( strlen($list_name) > 50 )
// Test list existence
if( !is_dir("$lists_path/$domain/$list_name") || $list_name == "" )
{
$_SESSION["error_code"] = 12;
header("Location: error.php");
exit();
}