| 6 |
* Copyright (C) 2004-2025 Leaflet <leaflet@leafok.com> |
* Copyright (C) 2004-2025 Leaflet <leaflet@leafok.com> |
| 7 |
*/ |
*/ |
| 8 |
|
|
| 9 |
|
#ifdef HAVE_CONFIG_H |
| 10 |
|
#include "config.h" |
| 11 |
|
#endif |
| 12 |
|
|
| 13 |
#include "bbs.h" |
#include "bbs.h" |
| 14 |
#include "common.h" |
#include "common.h" |
| 15 |
#include "database.h" |
#include "database.h" |
| 25 |
#include <string.h> |
#include <string.h> |
| 26 |
#include <regex.h> |
#include <regex.h> |
| 27 |
#include <unistd.h> |
#include <unistd.h> |
| 28 |
#include <mysql/mysql.h> |
#include <mysql.h> |
| 29 |
#include <sys/param.h> |
#include <sys/param.h> |
| 30 |
|
|
| 31 |
static const int BBS_username_min_len = 3; // common len = 5, special len = 3 |
static const int BBS_username_min_len = 3; // common len = 5, special len = 3 |
| 119 |
// Verify format |
// Verify format |
| 120 |
for (i = 0; ok && username[i] != '\0'; i++) |
for (i = 0; ok && username[i] != '\0'; i++) |
| 121 |
{ |
{ |
| 122 |
if (!(isalpha(username[i]) || (i > 0 && (isdigit(username[i]) || username[i] == '_')))) |
if (!(isalpha((int)username[i]) || (i > 0 && (isdigit((int)username[i]) || username[i] == '_')))) |
| 123 |
{ |
{ |
| 124 |
ok = 0; |
ok = 0; |
| 125 |
} |
} |
| 130 |
} |
} |
| 131 |
for (i = 0; ok && password[i] != '\0'; i++) |
for (i = 0; ok && password[i] != '\0'; i++) |
| 132 |
{ |
{ |
| 133 |
if (!isalnum(password[i])) |
if (!isalnum((int)password[i])) |
| 134 |
{ |
{ |
| 135 |
ok = 0; |
ok = 0; |
| 136 |
} |
} |
| 342 |
goto cleanup; |
goto cleanup; |
| 343 |
} |
} |
| 344 |
|
|
| 345 |
|
if (!SSH_v2 && checklevel2(&BBS_priv, P_MAN_S)) |
| 346 |
|
{ |
| 347 |
|
prints("\033[1;31m非普通账户必须使用SSH方式登录\033[m\r\n"); |
| 348 |
|
ret = 1; |
| 349 |
|
goto cleanup; |
| 350 |
|
} |
| 351 |
|
|
| 352 |
snprintf(sql, sizeof(sql), |
snprintf(sql, sizeof(sql), |
| 353 |
"UPDATE user_pubinfo SET visit_count = visit_count + 1, " |
"UPDATE user_pubinfo SET visit_count = visit_count + 1, " |
| 354 |
"last_login_dt = NOW() WHERE UID = %d", |
"last_login_dt = NOW() WHERE UID = %d", |