diff --git a/upload/static/js/register.js b/upload/static/js/register.js index 744ef111945d2d3acda71aaed0f983ddcb5ba5a1..cbe6bcdd3adbcc4fba4f7c44f5fc946a73afc631 100644 --- a/upload/static/js/register.js +++ b/upload/static/js/register.js @@ -272,7 +272,7 @@ function checkusername(id) { } else { lastusername = username; } - if(username.match(/<|"/ig)) { + if(username.match(/<|>|"|\(|\)|'/ig)) { errormessage(id, '用户名包含敏感字符'); return; } diff --git a/upload/uc_client/model/user.php b/upload/uc_client/model/user.php index 9dba257de42af91533ed4b57702cab0f8d05c1c8..8e44df9d9275f54e47bad19cdb720605592cbf72 100644 --- a/upload/uc_client/model/user.php +++ b/upload/uc_client/model/user.php @@ -59,7 +59,7 @@ class usermodel { $guestexp .= '|^Guest'; $len = $this->dstrlen($username); - if($len > 15 || $len < 3 || preg_match("/\s+|^c:\\con\\con|[%,\*\"\s\<\>\&]|$guestexp/is", $username)) { + if($len > 15 || $len < 3 || preg_match("/\s+|^c:\\con\\con|[%,\*\"\s\<\>\&\(\)']|$guestexp/is", $username)) { return FALSE; } else { return TRUE; diff --git a/upload/uc_server/model/user.php b/upload/uc_server/model/user.php index 1ede991eedca4e07bdf6bf05c9373ebb9a151db7..d0464cf914483ab44b4f70784e1c003bec7e4fbe 100644 --- a/upload/uc_server/model/user.php +++ b/upload/uc_server/model/user.php @@ -59,7 +59,7 @@ class usermodel { $guestexp .= '|^Guest'; $len = $this->dstrlen($username); - if($len > 15 || $len < 3 || preg_match("/\s+|^c:\\con\\con|[%,\*\"\s\<\>\&]|$guestexp/is", $username)) { + if($len > 15 || $len < 3 || preg_match("/\s+|^c:\\con\\con|[%,\*\"\s\<\>\&\(\)']|$guestexp/is", $username)) { return FALSE; } else { return TRUE;