Update of /cvsroot/phpmychat/phpMyChat-0.15/chat/lib/index_libs
In directory usw-pr-cvs1:/tmp/cvs-serv22712/chat/lib/index_libs
Modified Files:
main_index.lib.php3
Log Message:
Security: avoid creation new rooms by change parameters in input form.
Index: main_index.lib.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat-0.15/chat/lib/index_libs/main_index.lib.php3,v
retrieving revision 1.39
retrieving revision 1.40
diff -C2 -r1.39 -r1.40
*** main_index.lib.php3 2001/06/16 10:20:14 1.39
--- main_index.lib.php3 2001/09/17 08:29:03 1.40
***************
*** 362,366 ****
}
// Room is among other public ones
! else if (!empty($enterDefaultRoomName))
{
$targetRoom = $enterDefaultRoomName;
--- 362,366 ----
}
// Room is among other public ones
! else if (!empty($enterDefaultRoomName) && (pmcIsInto($enterDefaultRoomName, $defaultChatRooms) > 0))
{
$targetRoom = $enterDefaultRoomName;
|
