Public/elog
1
0
Fork 0
mirror of https://gitea.psi.ch/ELOG/elog.git synced 2026-09-08 17:13:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added length check for new user names

Browse Source
This commit is contained in:
ritt 2023-01-04 13:37:35 +01:00
parent c89114fab7
commit 209deb00af
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
src/elogd.cxx
View File

@ -13276,6 +13276,24 @@ int save_user_config(LOGBOOK *lbs, const char *user, BOOL new_user) {
return 0;
}
/* check for string lengths */
if (strlen(getparam("new_user_name")) > 40) {
sprintf(str, "%s %s", loc("Login name"), loc("is too long"));
show_error(str);
return 0;
}
if (strlen(getparam("new_full_name")) > 80) {
sprintf(str, "%s %s", loc("Full name"), loc("is too long"));
show_error(str);
return 0;
}
if (strlen(getparam("new_user_email")) > 80) {
sprintf(str, "%s %s", loc("Email address"), loc("is too long"));
show_error(str);
return 0;
}
/* check for blank password if not external authentication */
if (isparam("newpwd")) {
strlcpy(str, getparam("newpwd"), sizeof(str));
@ -25710,7 +25728,7 @@ int get_user_line(LOGBOOK *lbs, char *user, char *password, char *full_name, cha
/* return value: 0:cannot access password file, 1: OK, 2: user not found */
{
int i, j;
char str[256];
char str[1024];
PMXML_NODE user_node, node, subnode;
if (password)