Fix regexp for detecting valid mid/act/module

This commit is contained in:
Kijin Sung 2020-06-17 22:54:22 +09:00
parent 31c38c03a9
commit 221f30484f

View file

@ -1441,7 +1441,7 @@ class Context
}
elseif(in_array($key, array('mid', 'vid', 'act', 'module')))
{
$_val = preg_match('/^[a-zA-Z0-9_-]+$/', $_val) ? $_val : null;
$_val = preg_match('/^[a-zA-Z0-9_-]*$/', $_val) ? $_val : null;
if($_val === null)
{
self::$_instance->security_check = 'DENY ALL';