diff --git a/register.php b/register.php index f89bc83..0294eba 100644 --- a/register.php +++ b/register.php @@ -10,6 +10,7 @@ require_once 'core/config.php'; $getitstarted = new PartyStarter; $getitstarted->header(); +$usernamespecialchar = false; $passwordconfirmiswrong = false; $passwordistooshort = false; $user = new User($con, 0); @@ -24,6 +25,12 @@ if(isset($_POST['submit'])) { } '; $user = new User($con, $user->getID($con, $username)); + if(preg_match('/^[a-zA-Z0-9]+$/', $username) == 0) { + $usernamespecialchar = true; + } else { + $usernamespecialchar = false; + } + if ($password == $passwordconfirm) { $passwordconfirmiswrong = false; } else { @@ -35,7 +42,7 @@ if(isset($_POST['submit'])) { } else { $passwordistooshort = false; } - if ($passwordistooshort == false && $passwordconfirmiswrong == false) { + if ($passwordistooshort == false && $passwordconfirmiswrong == false && $usernamespecialchar == false) { $password = password_hash($password, PASSWORD_BCRYPT); $query = $con->prepare('SELECT COUNT(*) FROM users WHERE username=:username'); $query->bindParam(':username', $username); @@ -82,7 +89,7 @@ $thefunfact = json_decode($result);