[pLog-svn] r6926 - plugins/branches/lifetype-1.2/hiddeninput/class/action

[jondaley at devel.lifetype.net]

Author: jondaley
Date: 2009-10-09 14:11:20 -0400 (Fri, 09 Oct 2009)
New Revision: 6926

Modified:
   plugins/branches/lifetype-1.2/hiddeninput/class/action/pluginhiddeninputupdateconfigaction.class.php
Log:
strip out lots of characters, as our security settings don't allow for certain values (ex. a '.')

Modified: plugins/branches/lifetype-1.2/hiddeninput/class/action/pluginhiddeninputupdateconfigaction.class.php
===================================================================
--- plugins/branches/lifetype-1.2/hiddeninput/class/action/pluginhiddeninputupdateconfigaction.class.php	2009-09-10 14:38:12 UTC (rev 6925)
+++ plugins/branches/lifetype-1.2/hiddeninput/class/action/pluginhiddeninputupdateconfigaction.class.php	2009-10-09 18:11:20 UTC (rev 6926)
@@ -23,7 +23,7 @@
             $this->_pluginEnabled = $this->_request->getValue( "pluginEnabled" );
             $this->_pluginEnabled = ($this->_pluginEnabled != "" );	
             $this->_hiddenFields = $this->_request->getValue( "hiddenFields" );
-            $this->_hiddenFields = ereg_replace("[[:space:]]", "", $this->_hiddenFields);
+            $this->_hiddenFields = ereg_replace("[^0-9A-Za-z,]", "", $this->_hiddenFields);
             $val = new StringValidator();
             if( !$val->validate($this->_hiddenFields) ) {
                 $this->_view = new PluginHiddenInputConfigView( $this->_blogInfo );
@@ -36,7 +36,7 @@
                 // Check to make sure that all values in the empty fields input
                 // box are also in the hidden fields
             $this->_emptyFields = $this->_request->getValue("emptyFields");
-            $this->_emptyFields = ereg_replace("[[:space:]]", "", $this->_emptyFields);
+            $this->_emptyFields = ereg_replace("[^0-9A-Za-z,]", "", $this->_emptyFields);
             $emptyFieldsExploded = explode(",", $this->_emptyFields);
 
             foreach($emptyFieldsExploded as $emptyField){