novabbs
/
rocksolid-light
3
0
Fork 1
Code Issues 25 Pull Requests Releases Wiki Activity

Move sanitize_header for name in post.php to below checking cookies for name.

This commit is contained in:
Retro_Guy 2024-09-19 15:49:27 -07:00
parent 9e79a4af25
commit 8b9f385e72
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Rocksolid_Light/rocksolid/post.php
View File

@ -59,10 +59,9 @@ if (isset($_REQUEST['followupto']) && trim($_REQUEST['followupto']) != '') {
$followupto = null;
}
// Check header strings for bad characters
// Check some header strings for bad characters
$newsgroups = sanitize_header($newsgroups);
$subject = sanitize_header($subject);
$name = sanitize_header($name);
$email = sanitize_header($email);
// Load name from cookies
@ -73,6 +72,7 @@ if ($setcookies) {
// Truncate username at 30 characters to avoid abuse
$name = substr($name, 0, 30);
$name = sanitize_header($name);
$logged_in = false;
if (trim($name) != '') {