--- fenglin/bbs/user_service_reg.php	2025/04/29 11:55:32	1.4
+++ fenglin/bbs/user_service_reg.php	2025/12/23 09:23:10	1.6
@@ -34,7 +34,7 @@
 	header("Content-Type:application/json; charset=utf-8");
 
 	// Validate input data
-	if (!preg_match("/^[A-Za-z][A-Za-z0-9]{4,11}$/", $username))
+	if (!preg_match("/^[A-Za-z][A-Za-z0-9_]{4,11}$/", $username))
 	{
 		$result_set["return"]["code"] = -1;
 		array_push($result_set["return"]["errorFields"], array(
@@ -246,7 +246,7 @@
 	// Create new user
 	$temp_password = gen_passwd(10);
 
-	$sql = "INSERT INTO user_list(username, temp_password) values('$username', '$temp_password')";
+	$sql = "INSERT INTO user_list(username, temp_password) values('$username', SHA2('$temp_password', 256))";
 
 	$rs = mysqli_query($db_conn, $sql);
 	if ($rs == false)