fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-30 00:29:58 +09:00
Code Issues Projects Releases Packages Wiki Activity

Issue 1736 fixed a rollback code about find account of anwser in member module

Browse source 
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@10462 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
ngleader 2012-03-23 00:43:07 +00:00
parent ce0d9e5b4c
commit 4ba3fe05ac
2 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/member/member.controller.php
View file

@ -1710,11 +1710,6 @@
if (!$args->user_id) $args->user_id = 't'.$args->member_srl; if (!$args->user_id) $args->user_id = 't'.$args->member_srl;
if (!$args->user_name) $args->user_name = $args->member_srl; if (!$args->user_name) $args->user_name = $args->member_srl;
if(trim($args->find_account_answer))
{
$args->find_account_answer = md5($args->find_account_answer);
}
$output = executeQuery('member.insertMember', $args); $output = executeQuery('member.insertMember', $args);
if(!$output->toBool()) { if(!$output->toBool()) {
$oDB->rollback(); $oDB->rollback();

5
modules/member/member.model.php
View file

@ -252,6 +252,11 @@
} }
} }
if(strlen($info->find_account_answer) == 32 && preg_match('/[a-zA-Z0-9]+/', $info->find_account_answer))
{
$info->find_account_answer = null;
}
// XSS defence // XSS defence
$oSecurity = new Security($info); $oSecurity = new Security($info);
$oSecurity->encodeHTML('user_name', 'nick_name', 'find_account_answer', 'description', 'address.', 'group_list..'); $oSecurity->encodeHTML('user_name', 'nick_name', 'find_account_answer', 'description', 'address.', 'group_list..');