Berry-Dash/legacy-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check for username in send chatroom message

Browse Source
This commit is contained in:
Travis
2025-07-13 12:01:45 -07:00
parent 25184e1556
commit 43d585b244
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
database/sendChatroomMessage.php
View File

@@ -5,7 +5,8 @@ checkClientDatabaseVersion();
$post = getPostData(); $post = getPostData();
$request_content = $post['content'] ?? ''; $request_content = $post['content'] ?? '';
$token = $post['token'] ?? null; $token = $post['token'] ?? '';
$username = $post['username'] ?? '';
if (!preg_match('/^[ a-zA-Z0-9!@#\$%\^&\*\(\)_\+\-=\[\]\{\};\':",\.<>\/\?\\\\|`~]+$/', $request_content)) { if (!preg_match('/^[ a-zA-Z0-9!@#\$%\^&\*\(\)_\+\-=\[\]\{\};\':",\.<>\/\?\\\\|`~]+$/', $request_content)) {
exitWithMessage(json_encode(["success" => false, "message" => "Invalid content recieved"])); exitWithMessage(json_encode(["success" => false, "message" => "Invalid content recieved"]));
@@ -13,8 +14,8 @@ if (!preg_match('/^[ a-zA-Z0-9!@#\$%\^&\*\(\)_\+\-=\[\]\{\};\':",\.<>\/\?\\\\|`~
$conn = newConnection(); $conn = newConnection();
$stmt = $conn->prepare("SELECT * FROM users WHERE token = ?"); $stmt = $conn->prepare("SELECT * FROM users WHERE token = ? AND username = ?");
$stmt->bind_param("s", $token); $stmt->bind_param("ss", $token, $username);
$stmt->execute(); $stmt->execute();
$result = $stmt->get_result(); $result = $stmt->get_result();
$row = $result->fetch_assoc(); $row = $result->fetch_assoc();