Public_Tools/wavelog
2
0
Fork 0
mirror of https://github.com/wavelog/wavelog.git synced 2026-03-22 10:24:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

prohibit specialchars in passwords

Browse Source
This commit is contained in:
HB9HIL
2024-07-25 19:01:50 +02:00
parent 1484f50b34
commit 23f86e9893
1 changed files with 40 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
install/index.php
View File

@@ -348,8 +348,11 @@ if (!file_exists('.lock')) {
<div class="mb-3">
<input type="text" id="callbook_username" placeholder="<?= __("Callbook Username"); ?>" class="form-control" name="callbook_username" />
</div>
<div>
<div class="position-relative">
<input type="password" id="callbook_password" placeholder="<?= __("Callbook Password"); ?>" class="form-control" name="callbook_password" />
<div class="invalid-tooltip">
<?= sprintf(__("Password can't contain %s"), "' \" / \ < >"); ?>
</div>
</div>
</div>
</div>
@@ -467,9 +470,12 @@ if (!file_exists('.lock')) {
<label for="lastname" class="form-label"><?= __("Last Name"); ?></label>
<input type="text" id="lastname" tabindex="2" placeholder="Radio" class="form-control" name="lastname" />
</div>
<div class="col-md-6 mb-2">
<div class="col-md-6 mb-2 position-relative">
<label for="password" class="form-label"><?= __("Password"); ?></label>
<input type="password" id="password" tabindex="8" placeholder="**********" class="form-control" name="password" />
<div class="invalid-tooltip">
<?= sprintf(__("Password can't contain %s"), "' \" / \ < >"); ?>
</div>
</div>
</div>
<div class="row">
@@ -1173,6 +1179,10 @@ if (!file_exists('.lock')) {
if (!directory_check() || !websiteurl_check()) {
return;
}
pwdForbiddenChars($('#callbook_password'));
if ($('#callbook_password').hasClass('is-invalid') && $('#callbook_password').val() != '') {
return;
}
if (passwordField.val() != '') {
user_pwd_check();
}
@@ -1262,6 +1272,17 @@ if (!file_exists('.lock')) {
}
}
function pwdForbiddenChars(field) {
let pwd = field.val();
let specialChars = /['"\/\\<>]/;
if (pwd != '') {
if (specialChars.test(pwd)) {
input_is_valid(field, false);
}
}
}
/*
*
* General Requirement Levels
@@ -1286,7 +1307,10 @@ if (!file_exists('.lock')) {
* Tab 3 - Configuration
*
* Rules:
* Website-URL and Directory have to be green. No checks needed for 'Callbook' and 'Advanced Settings'.
* Website-URL and Directory have to be green. No checks needed 'Advanced Settings'.
*
* Callbook Password:
* - do not allow specialchars defined in pwdForbiddenChars() (hard)
*
* Directory:
* - no slash allowed (hard)
@@ -1315,6 +1339,10 @@ if (!file_exists('.lock')) {
websiteurl_check();
checklist_configuration();
});
$('#callbook_password').on('change', function() {
pwdForbiddenChars($('#callbook_password'));
});
});
function directory_check() {
@@ -1475,6 +1503,7 @@ if (!file_exists('.lock')) {
* Tab 5 - First User
*
* Rules:
* - do not allow specialchars in userpassword defined in pwdForbiddenChars() (hard)
* - No input can be empty (hard)
* - Locator have to match regex (hard)
* - E-Mail have to match regex (hard)
@@ -1514,6 +1543,9 @@ if (!file_exists('.lock')) {
emailField.on('change', function() {
email_verification();
});
passwordField.on('change', function() {
pwdForbiddenChars(passwordField);
});
cnfmPasswordField.on('change focusout', function() {
user_pwd_check();
});
@@ -1685,6 +1717,10 @@ if (!file_exists('.lock')) {
function checklist_configuration() {
var checklist_configuration = true;
if ($('#callbook_password').hasClass('is-invalid')) {
checklist_configuration = false;
}
if ($('#directory').hasClass('is-invalid')) {
checklist_configuration = false;
}
@@ -1787,4 +1823,4 @@ if (!file_exists('.lock')) {
header("Location: $websiteurl");
} ?>
</html>
</html>