v09.01.04

Author: DavideC03

bin/parts/create_user_elem.php

@@ -48,7 +48,7 @@ public function create($username, $sub_id){
 			$stmt = $this->conn->prepare($query);
 
 			// Sanitize
-			$username = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars . $this->nums, "/")."]/", '', $username)));
+			$username = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars . $this->nums. "-", "/")."]/", '', $username)));
 			$sub_id = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->nums, "/")."]/", '', strval($sub_id))));
 
 			// Bind values

bin/parts/esec_elem.php

@@ -762,7 +762,7 @@ public function create($input){
 
 			// sanitize
 			$data = array();
-			$data["username"] = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars . $this->nums, "/")."]/", '', $input["username"])));
+			$data["username"] = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars . $this->nums . "-", "/")."]/", '', $input["username"])));
 			$data["token"] = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars . $this->nums, "/")."]/", '', $input["token"])));
 			$data["answers"] = array();
 			$data["answers"]["name"] = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars . $this->nums, "/")."]/", '', $input["answers"]["name"])));

bin/parts/languages_elem.php

@@ -14,8 +14,6 @@ class Languages{
 		// class variabile(s)
 		private $conn;
 		private $table_name = "languages";
-		private $chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
-		private $nums = "0123456789";
 
 		/**
 		 * Constructor

bin/parts/priority_elem.php

@@ -523,7 +523,7 @@ public function create($input){
 
 			// sanitize
 			$data = array();
-			$data["username"] = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars . $this->nums, "/")."]/", '', $input["username"])));
+			$data["username"] = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars . $this->nums . "-", "/")."]/", '', $input["username"])));
 			$data["token"] = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars . $this->nums, "/")."]/", '', $input["token"])));
 			$data["server_id"] = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->nums, "/")."]/", '', $input["server_id"])));
 			$data["instruction"] = htmlspecialchars(strip_tags(preg_replace("/[^".preg_quote($this->chars, "/")."]/", '', $input["instruction"])));

docs/CHANGELOG.md

@@ -2,13 +2,19 @@
 Repo containing the public part of the REST/API
 
 - [Changelog](#changelog)
-  - [[09.01.03] - 2021-07-08](#090103---2021-07-08)
+  - [[09.01.04] - 2021-07-10](#090104---2021-07-10)
     - [Changed](#changed)
-  - [[09.01.02] - 2021-07-08](#090102---2021-07-08)
+  - [[09.01.03] - 2021-07-08](#090103---2021-07-08)
     - [Changed](#changed-1)
+  - [[09.01.02] - 2021-07-08](#090102---2021-07-08)
+    - [Changed](#changed-2)
   - [[09.01.01] - 2021-06-19](#090101---2021-06-19)
     - [Added](#added)
 
+## [09.01.04] - 2021-07-10
+### Changed
+- Now usernames can have "-" inside 
+
 ## [09.01.03] - 2021-07-08
 ### Changed
 - Fixed a bug in esec_elem.php file