ezmlm-web/ezmlm-web
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

filter input for admin users into a lowercase string

Browse source
This commit is contained in:
lars 2008-08-25 02:23:18 +00:00
parent 685f33af48
commit 428a3fa598
1 changed files with 19 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
ezmlm-web.cgi
View file

@ -2286,6 +2286,25 @@ sub update_webusers {
my $webusers_filtered = $q->param('webusers');
# remove any insecure characters (e.g. a line break :))
$webusers_filtered =~ s/[^\w,_\.\-\@]/ /gs;
# replace commas by space and reduce multiple space
# strip leading and trailing whitespace
$webusers_filtered =~ s/,/ /g;
$webusers_filtered =~ s/^\s+//;
$webusers_filtered =~ s/\s+$//;
# reduce multiple whitespaces to a single space
$webusers_filtered =~ s/\s+/ /g;
# turn everything into lowercase (except for "ALL")
my @admins = ();
my $admin;
foreach $admin (split(/ /, $webusers_filtered)) {
$admin = lc($admin) unless ($admin eq 'ALL');
push @admins, $admin;
}
# concatenate the lowercase usernames again
$webusers_filtered = join(' ', @admins);
# create the updated webusers file
open(TMP, "<$temp_file");
unless (open(WU, ">$WEBUSERS_FILE")) {
warn "the webusers file ($WEBUSERS_FILE) is not writable";