diff options
| author | Marc Alexander <admin@m-a-styles.de> | 2017-07-22 17:26:41 +0200 |
|---|---|---|
| committer | Marc Alexander <admin@m-a-styles.de> | 2017-07-22 17:38:04 +0200 |
| commit | 882a3c383103802c491404032c5d267e4f5271a0 (patch) | |
| tree | 75267473a962e822fb7c4daf0d98e2b799782ea2 /phpBB/phpbb/profilefields | |
| parent | fa3bdedf7bebd64336daaeff7c41b842fa098cf9 (diff) | |
| download | forums-882a3c383103802c491404032c5d267e4f5271a0.tar forums-882a3c383103802c491404032c5d267e4f5271a0.tar.gz forums-882a3c383103802c491404032c5d267e4f5271a0.tar.bz2 forums-882a3c383103802c491404032c5d267e4f5271a0.tar.xz forums-882a3c383103802c491404032c5d267e4f5271a0.zip | |
[ticket/security/211] Make sure website URL only uses http & https schemes
SECURITY-211
Diffstat (limited to 'phpBB/phpbb/profilefields')
| -rw-r--r-- | phpBB/phpbb/profilefields/type/type_url.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/phpBB/phpbb/profilefields/type/type_url.php b/phpBB/phpbb/profilefields/type/type_url.php index 375cf5b19a..2bc0002262 100644 --- a/phpBB/phpbb/profilefields/type/type_url.php +++ b/phpBB/phpbb/profilefields/type/type_url.php @@ -64,7 +64,7 @@ class type_url extends type_string return false; } - if (!preg_match('#^' . get_preg_expression('url') . '$#iu', $field_value)) + if (!preg_match('#^' . get_preg_expression('url_http') . '$#iu', $field_value)) { return $this->user->lang('FIELD_INVALID_URL', $this->get_field_name($field_data['lang_name'])); } |