From 55ec8ca247633af66dacaa15f166ebae65e4ab3a Mon Sep 17 00:00:00 2001 From: einhverfr Date: Mon, 4 Sep 2006 18:13:37 +0000 Subject: Added release notes. Updated eps logos Added underscore to allowable characters in username. git-svn-id: https://ledger-smb.svn.sourceforge.net/svnroot/ledger-smb/trunk@20 4979c152-3d1c-0410-bac9-87ea11338e46 --- LedgerSMB/Session.pm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'LedgerSMB') diff --git a/LedgerSMB/Session.pm b/LedgerSMB/Session.pm index d287d199..902e67c4 100755 --- a/LedgerSMB/Session.pm +++ b/LedgerSMB/Session.pm @@ -53,7 +53,7 @@ sub session_check { my ($sessionLogin) = $checkQuery->fetchrow_array; my $login = $form->{login}; - $login =~ s/[^a-zA-Z0-9@.-]//g; + $login =~ s/[^a-zA-Z0-9@_.-]//g; if($sessionLogin eq $login){ $updateAge->execute($sessionid) || $form->dberror('Updating session age: '); @@ -94,7 +94,7 @@ sub session_create { # this is assuming that $form->{login} is safe, which might be a bad assumption # so, I'm going to remove some chars, which might make previously valid logins invalid my $login = $form->{login}; - $login =~ s/[^a-zA-Z0-9@.-]//g; + $login =~ s/[^a-zA-Z0-9@._-]//g; #delete any existing stale sessions with this login if they exist if (!$myconfig{timeout}){ -- cgit v1.2.3