diff --git a/upload/includes/functions.php b/upload/includes/functions.php index a6b4bc80..ae76b741 100644 --- a/upload/includes/functions.php +++ b/upload/includes/functions.php @@ -1576,6 +1576,9 @@ if(!is_valid_syntax('username',$username) && $multi!='yes' || $matches) { e(lang("class_invalid_user")); } + if(!preg_match('/^[A-Za-z0-9_.]+$/', $username)){ + return false; + } return true; } diff --git a/upload/styles/cb_28/layout/signup.html b/upload/styles/cb_28/layout/signup.html index 43975a41..773eb671 100644 --- a/upload/styles/cb_28/layout/signup.html +++ b/upload/styles/cb_28/layout/signup.html @@ -241,27 +241,31 @@ } else if (userSect.val().indexOf(' ') >= 0) { addErrClass(userSect, errors["username_spaces"], true, false); } else { - $.ajax({ - url: baseurl + "/ajax/commonAjax.php", - type: "post", - dataType: "html", - data: { - "mode":'userExists', - "username":usernameVal, - }, - beforeSend: function() { - $(document).find('#more-view-channel').text('Loading videos..') - }, + if(!userSect.val().match(/^[A-Za-z0-9_.]+$/)){ + addErrClass(userSect, errors["name_invalid_chars"], true, false); + }else{ + $.ajax({ + url: baseurl + "/ajax/commonAjax.php", + type: "post", + dataType: "html", + data: { + "mode":'userExists', + "username":usernameVal, + }, + beforeSend: function() { + $(document).find('#more-view-channel').text('Loading videos..') + }, - success: function(data) { - data = $.trim(data); - if (data == 'NO') { - removeErrClass(userSect); - } else { - addErrClass(userSect, errors['user_exists'], true, false) + success: function(data) { + data = $.trim(data); + if (data == 'NO') { + removeErrClass(userSect); + } else { + addErrClass(userSect, errors['user_exists'], true, false) + } } - } - }); + }); + } } }); @@ -372,7 +376,10 @@ } else if (username.indexOf(' ') >= 0) { addErrClass(usernameSect, errors["username_spaces"]); goodToGo = false; - } + } else if(!username.match(/^[A-Za-z0-9_.]+$/)){ + addErrClass(usernameSect, errors["name_invalid_chars"], true, false); + goodToGo = false; + } /*if (gotNums != null) { addErrClass(usernameSect, errors["name_invalid_chars"]);