mirror/FreshRSS
0
0
Fork 0
mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-04-29 02:34:05 -04:00
Code Issues Packages Projects Releases Wiki Activity

API: sanitize username

Browse Source 
https://github.com/marienfressinaud/FreshRSS/issues/13
This commit is contained in:
Alexandre Alapetite
2014-02-27 23:53:06 +01:00
parent ed27a69c3a
commit d79da54c98
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
p/api/greader.php
View File

@@ -124,7 +124,10 @@ function authorizationToUser() {
if ($headerAuth != '') {
$headerAuthX = explode('/', $headerAuth, 2);
if ((count($headerAuthX) === 2) && ($headerAuthX[1] === TEMP_AUTH)) {
return $headerAuthX[0];
$user = $headerAuthX[0];
if (ctype_alnum($user)) {
return $user;
}
}
}
return null;