diff --git a/apply/index.php b/apply/index.php index a028872..c4cf027 100644 --- a/apply/index.php +++ b/apply/index.php @@ -20,12 +20,22 @@ if(isset($_REQUEST['authcode'])) { $status=0; } } + function strlens($str){ + if(strlen($str) > 255){ + return true; + } + else{ + return false; + } + } if($sw == 1) { if(empty($name) || empty($url) || empty($icon) || empty($group_id) || empty($mail) ) { exit(''); } else if(!preg_match('{^http[s]?://([\w-]+\.)+[\w]+(/[\w-./%&=]*)\.(jpg|png|ico)$}i', $icon) || !preg_match('{^http[s]?://([\w-]+\.)+[\w-]+(/[\w-./?%&#=]*)?$}i', $url)) { exit(''); + } else if(strlens($name)||strlens($url)||strlens($icon)||strlens($group_id)||strlens($mail)){ + exit(''); } else { if($DB->num_rows($DB->query("SELECT * FROM `lylme_apply` WHERE `apply_url` LIKE '".$url."';"))>0) { exit('');