diff options
Diffstat (limited to 'LedgerSMB')
-rwxr-xr-x | LedgerSMB/Form.pm | 2 | ||||
-rwxr-xr-x | LedgerSMB/Session.pm | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/LedgerSMB/Form.pm b/LedgerSMB/Form.pm index 73d9f4c5..12ddfa40 100755 --- a/LedgerSMB/Form.pm +++ b/LedgerSMB/Form.pm @@ -43,7 +43,7 @@ sub new { $self->{menubar} = 1 if $self->{path} =~ /lynx/i; $self->{version} = "2.6.17"; - $self->{dbversion} = "2.6.12"; + $self->{dbversion} = "2.6.17"; bless $self, $type; diff --git a/LedgerSMB/Session.pm b/LedgerSMB/Session.pm index 902e67c4..d287d199 100755 --- a/LedgerSMB/Session.pm +++ b/LedgerSMB/Session.pm @@ -53,7 +53,7 @@ sub session_check { my ($sessionLogin) = $checkQuery->fetchrow_array; my $login = $form->{login}; - $login =~ s/[^a-zA-Z0-9@_.-]//g; + $login =~ s/[^a-zA-Z0-9@.-]//g; if($sessionLogin eq $login){ $updateAge->execute($sessionid) || $form->dberror('Updating session age: '); @@ -94,7 +94,7 @@ sub session_create { # this is assuming that $form->{login} is safe, which might be a bad assumption # so, I'm going to remove some chars, which might make previously valid logins invalid my $login = $form->{login}; - $login =~ s/[^a-zA-Z0-9@._-]//g; + $login =~ s/[^a-zA-Z0-9@.-]//g; #delete any existing stale sessions with this login if they exist if (!$myconfig{timeout}){ |