- tiny bit of sunshine :D

git-svn-id: file:///svn/phpbb/trunk@6734 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
David M 2006-12-09 23:52:40 +00:00
parent bf2a0e7eb2
commit b72caf0be4
2 changed files with 3 additions and 3 deletions

View file

@ -940,7 +940,7 @@ switch ($mode)
if ($ipdomain && $auth->acl_getf_global('m_info')) if ($ipdomain && $auth->acl_getf_global('m_info'))
{ {
if (preg_match('#[a-z]#', $ipdomain)) if (strspn($ipdomain, 'abcdefghijklmnopqrstuvwxyz'))
{ {
$hostnames = gethostbynamel($ipdomain); $hostnames = gethostbynamel($ipdomain);
@ -969,7 +969,7 @@ switch ($mode)
$sql = 'SELECT DISTINCT poster_id $sql = 'SELECT DISTINCT poster_id
FROM ' . POSTS_TABLE . ' FROM ' . POSTS_TABLE . '
WHERE poster_ip ' . ((preg_match('#%#', $ips)) ? 'LIKE' : 'IN') . " ($ips) WHERE poster_ip ' . ((strpos($ips, '%') !== false) ? 'LIKE' : 'IN') . " ($ips)
AND forum_id IN (0, " . implode(', ', $ip_forums) . ')'; AND forum_id IN (0, " . implode(', ', $ip_forums) . ')';
$result = $db->sql_query($sql); $result = $db->sql_query($sql);

View file

@ -33,7 +33,7 @@ if (!empty($load_extensions))
$sid = (isset($_GET['sid'])) ? htmlspecialchars($_GET['sid']) : ''; $sid = (isset($_GET['sid'])) ? htmlspecialchars($_GET['sid']) : '';
$id = (isset($_GET['id'])) ? intval($_GET['id']) : 0; $id = (isset($_GET['id'])) ? intval($_GET['id']) : 0;
if (!preg_match('/^[A-Za-z0-9]*$/', $sid)) if (!ctype_alnum($sid))
{ {
$sid = ''; $sid = '';
} }