- tiny bit of sunshine :D

git-svn-id: file:///svn/phpbb/trunk@6734 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
David M 2006-12-09 23:52:40 +00:00
parent bf2a0e7eb2
commit b72caf0be4
2 changed files with 3 additions and 3 deletions

View file

@ -940,7 +940,7 @@ switch ($mode)
if ($ipdomain && $auth->acl_getf_global('m_info'))
{
if (preg_match('#[a-z]#', $ipdomain))
if (strspn($ipdomain, 'abcdefghijklmnopqrstuvwxyz'))
{
$hostnames = gethostbynamel($ipdomain);
@ -969,7 +969,7 @@ switch ($mode)
$sql = 'SELECT DISTINCT poster_id
FROM ' . POSTS_TABLE . '
WHERE poster_ip ' . ((preg_match('#%#', $ips)) ? 'LIKE' : 'IN') . " ($ips)
WHERE poster_ip ' . ((strpos($ips, '%') !== false) ? 'LIKE' : 'IN') . " ($ips)
AND forum_id IN (0, " . implode(', ', $ip_forums) . ')';
$result = $db->sql_query($sql);

View file

@ -33,7 +33,7 @@ if (!empty($load_extensions))
$sid = (isset($_GET['sid'])) ? htmlspecialchars($_GET['sid']) : '';
$id = (isset($_GET['id'])) ? intval($_GET['id']) : 0;
if (!preg_match('/^[A-Za-z0-9]*$/', $sid))
if (!ctype_alnum($sid))
{
$sid = '';
}