Truncate usernames received by post/get to help avoid abuse.

2024-07-23 04:36:54 -07:00 · 2024-07-23 04:36:54 -07:00 · d1a6b271ca
parent 9494d6e1a6
commit d1a6b271ca
1 changed files with 3 additions and 0 deletions
--- a/Rocksolid_Light/rocksolid/post.php
+++ b/Rocksolid_Light/rocksolid/post.php
@ -58,6 +58,9 @@ if ($setcookies) {
        $name = $_COOKIE["mail_name"];
 }

+// Truncate username at 30 characters to avoid abuse
+$name = substr($name, 0, 30);
+
 $logged_in = false;
 if(trim($name) != '') {
    $logged_in = verify_logged_in(trim(strtolower($name)));