News:

CPG Release 1.6.29
During HTML5 upload, keep pseudo blank code 200 messages from triggering error condition
added Russian language
correct failure to use theme menu icons in album manager
minor vulnerabilities mitigation

Main Menu

profile.php doesn't check email format

Started by Makc666, September 18, 2006, 11:08:52 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Makc666

If you look into
register.php
you will find this one:
    if (!eregi("^[_\.0-9a-z\-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,6}$", $email)) $error .= '<li>' . $lang_register_php['err_invalid_email'];

If you look into
profile.php
you will not find any check for email format.
So users can enter any email they want like: testest.com or test@test