diff options
| author |  Clément <clement@selfhost.fr>
| 2017-02-16 18:54:59 +0100 |
|---|---|---|
| committer | Clément <clement@selfhost.fr>
| 2017-02-16 18:54:59 +0100 |
| commit | 4eeae5171b885b6dda392f5dd68d6dd78a0c7858 (patch) | |
| tree | f4aebf0654c44838c54fdbb9ec7117f617008b89 /app/Models/Auth.php | |
| parent | 8d2b76334cd60356c85810bf4902124105d54ad4 (diff) | |
use function with preg_match to check username
Diffstat (limited to 'app/Models/Auth.php')
| -rw-r--r-- | app/Models/Auth.php | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/app/Models/Auth.php b/app/Models/Auth.php index e63a24b27..476627e10 100644 --- a/app/Models/Auth.php +++ b/app/Models/Auth.php @@ -182,8 +182,7 @@ class FreshRSS_Auth { class FreshRSS_FormAuth { public static function checkCredentials($username, $hash, $nonce, $challenge) { - $aValid = array('-', '_', '.'); - if (!ctype_alnum(str_replace($aValid, '', $username)) || + if (!FreshRSS_user_Controller::checkUsername($username) || !ctype_graph($challenge) || !ctype_alnum($nonce)) { Minz_Log::debug('Invalid credential parameters:' . |