summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristopher Burger <burgerc@freeside.biz>2019-02-19 15:57:51 -0500
committerChristopher Burger <burgerc@freeside.biz>2019-02-21 12:42:51 -0500
commitfc5e0d24bb5c23a34a495d224e6c93884f0d3fc5 (patch)
tree998d2b758ff0d2e9fd88624250c15383d1c3be12
parent0df2eac272aa26a62431f5cd830c1cb7b1018e32 (diff)
RT# 82092 - added field validation
-rw-r--r--httemplate/edit/process/part_virtual_field.html4
1 files changed, 3 insertions, 1 deletions
diff --git a/httemplate/edit/process/part_virtual_field.html b/httemplate/edit/process/part_virtual_field.html
index 6a8008db7..97be7e65e 100644
--- a/httemplate/edit/process/part_virtual_field.html
+++ b/httemplate/edit/process/part_virtual_field.html
@@ -43,7 +43,9 @@
my $act = 'add';
## make cgi->param("name") lowercase
-$cgi->param('name' => lc $cgi->param('name'));
+my $vcf_name = $cgi->param('name');
+$vcf_name =~ s/\s/_/g; $vcf_name =~ s/[^A-Za-z0-9\-_]//g;
+$cgi->param('name' => lc $vcf_name);
die "access denied"
unless $FS::CurrentUser::CurrentUser->access_right('Configuration');