From: Christopher Burger <burgerc@freeside.biz>
Date: Tue, 19 Feb 2019 20:57:51 +0000 (-0500)
Subject: RT# 82092 - added field validation
X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=commitdiff_plain;h=d5b8de340fed6080ca521844131f78336b491cd9

RT# 82092 - added field validation
---

diff --git a/httemplate/edit/process/part_virtual_field.html b/httemplate/edit/process/part_virtual_field.html
index 6a8008db7..97be7e65e 100644
--- a/httemplate/edit/process/part_virtual_field.html
+++ b/httemplate/edit/process/part_virtual_field.html
@@ -43,7 +43,9 @@
 my $act = 'add';
 
 ## make cgi->param("name") lowercase
-$cgi->param('name' => lc $cgi->param('name'));
+my $vcf_name = $cgi->param('name');
+$vcf_name =~ s/\s/_/g; $vcf_name =~ s/[^A-Za-z0-9\-_]//g;
+$cgi->param('name' => lc $vcf_name);
 
 die "access denied"
   unless $FS::CurrentUser::CurrentUser->access_right('Configuration');