From a9cdd5fcff66066ec76c944411d44c492a566662 Mon Sep 17 00:00:00 2001 From: =?utf8?q?St=C3=A9phane=20Jacob?= Date: Fri, 1 Apr 2011 18:36:59 +0200 Subject: [PATCH] Checks alias and domain before editing an alias. MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Stéphane Jacob --- modules/xnetlists.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/modules/xnetlists.php b/modules/xnetlists.php index 3f0e792..83349b3 100644 --- a/modules/xnetlists.php +++ b/modules/xnetlists.php @@ -215,6 +215,11 @@ class XnetListsModule extends ListsModule require_once 'emails.inc.php'; list($local_part, $domain) = explode('@', $lfull); + if ($globals->asso('mail_domain') != $domain || !preg_match("/^[a-zA-Z0-9\-\.]*$/", $local_part)) { + $page->trigErrorRedirect('Le nom de l\'alias est erroné.', $globals->asso('diminutif') . '/lists'); + } + + if (Env::has('add_member')) { S::assert_xsrf_token(); -- 2.1.4