diff options
| author | Mitch Jackson <mitch@freeside.biz> | 2018-08-26 17:07:46 -0400 |
|---|---|---|
| committer | Mitch Jackson <mitch@freeside.biz> | 2018-09-07 15:02:17 -0400 |
| commit | f257c3be34aed5f651a1928f4bc18864c0d533bc (patch) | |
| tree | 101b6458cb6016c7ac198b12587135a10af404f1 /httemplate/misc/process | |
| parent | be0fbca00a9293aa7984dca5724fa885f41dbd5e (diff) | |
RT# 80869 Harden process payment screen against Edge browser bug
Diffstat (limited to 'httemplate/misc/process')
| -rw-r--r-- | httemplate/misc/process/payment.cgi | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/httemplate/misc/process/payment.cgi b/httemplate/misc/process/payment.cgi index d0e589661..7747bcbea 100644 --- a/httemplate/misc/process/payment.cgi +++ b/httemplate/misc/process/payment.cgi @@ -100,11 +100,11 @@ if ( (my $custpaybynum = scalar($cgi->param('custpaybynum'))) > 0 ) { # use new info ## - $cgi->param('year') =~ /^(\d+)$/ + $cgi->param('year') =~ /^(\d{4})/ or errorpage("illegal year ". $cgi->param('year')); $year = $1; - $cgi->param('month') =~ /^(\d+)$/ + $cgi->param('month') =~ /^(\d{2})/ or errorpage("illegal month ". $cgi->param('month')); $month = $1; |