3 Commits
v1.2 ... v1.3

3 changed files with 14 additions and 6 deletions

View File

@@ -13,16 +13,16 @@ if (!isset($_SESSION["auth"]) || $_SESSION["auth"] != 1)
exit();
}
// We do not print any error in the next three cases, because a legitimate
// user will never produce such results, even with disabled javascript
if ( preg_match("/[^a-z0-9_-]/", $list_name) )
{
$_SESSION["error_code"] = 14;
header("Location: error.php");
exit();
}
if ( strlen($list_name) > 30 )
if ( strlen($list_name) > 50 )
{
$_SESSION["error_code"] = 13;
header("Location: error.php");
exit();
}
@@ -30,6 +30,7 @@ if ( strlen($list_name) > 30 )
// Test list existence
if( !is_dir("$lists_path/$domain/$list_name") || $list_name == "" )
{
$_SESSION["error_code"] = 12;
header("Location: error.php");
exit();
}

View File

@@ -36,6 +36,12 @@
There is an incorrect email in the moderators list.
{elseif $error_code == 11}
You do not own this list.
{elseif $error_code == 12}
The list does not exist within the mlmmj working folder.
{elseif $error_code == 13}
The list name exceeds the maximum length of 50 chars.
{elseif $error_code == 14}
The list name contains chars which are not allowed.
{else}
Unknown error.
{/if}

View File

@@ -32,16 +32,16 @@ if ( !isset($_SESSION["auth"]) || $_SESSION["auth"] != 1 )
$domain = $_SESSION["domain"];
// We do not print any error in the next four cases, because a legitimate
// user will never produce such results, even with disabled javascript
if ( preg_match("/[^a-z0-9_-]/", $list_name) )
{
$_SESSION["error_code"] = 14;
header("Location: error.php");
exit();
}
if ( strlen($list_name) > 30 )
if ( strlen($list_name) > 50 )
{
$_SESSION["error_code"] = 13;
header("Location: error.php");
exit();
}
@@ -49,6 +49,7 @@ if ( strlen($list_name) > 30 )
// Test list existence
if( !is_dir("$lists_path/$domain/$list_name") || $list_name == "" )
{
$_SESSION["error_code"] = 12;
header("Location: error.php");
exit();
}