novabbs
/
rocksolid-light
3
0
Fork 1
Code Issues 22 Pull Requests Releases Wiki Activity

Try to improve checking from line in user link search

This commit is contained in:
Retro_Guy 2022-03-04 10:51:41 +00:00
parent 1fac7da654
commit 72da0c7fae
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Rocksolid_Light/rocksolid/search.php
View File

@ -338,11 +338,11 @@ function get_header_search($group, $terms) {
$stmt = $dbh->prepare("SELECT * FROM $table WHERE newsgroup=:group AND ".$_POST['searchpoint']." like :terms ESCAPE '\' ORDER BY date DESC"); $stmt = $dbh->prepare("SELECT * FROM $table WHERE newsgroup=:group AND ".$_POST['searchpoint']." like :terms ESCAPE '\' ORDER BY date DESC");
$stmt->bindParam(':group', $group); $stmt->bindParam(':group', $group);
$stmt->bindParam(':terms', $searchterms); $stmt->bindParam(':terms', $searchterms);
$check = "/(\s|\(|<)".trim($searchterms, '\%')."/i"; $check = "/([a-z]|[0-9]|\!|#|\$|\%|\&|\'|\*|\+|\-|\/|\=|\?|\^|\_|\"|\`|\{|\||\}|\~|\;)".trim($searchterms, '\%')."/i";
$stmt->execute(); $stmt->execute();
while($found = $stmt->fetch()) { while($found = $stmt->fetch()) {
if(isset($_REQUEST['data']) && ($_REQUEST['searchpoint'] == 'name')) { if(isset($_REQUEST['data']) && ($_REQUEST['searchpoint'] == 'name')) {
if(!preg_match($check, $found['name'])) { if(preg_match($check, $found['name'])) {
continue; continue;
} }
} }