X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=web%2Fupdate.cgi;h=33fc9de543e409a5f526d90815e178c33416f9d0;hb=ffec551d9f2f85fd4f6030a44615cfaed7b050df;hp=5fdfb74da2ee6489bef0935ccc1e1a4cd81e5f1b;hpb=c50d88536a4feb3087d1aa802e110250cb2861fc;p=mirror%2Fuserdir-ldap.git

diff --git a/web/update.cgi b/web/update.cgi
index 5fdfb74..33fc9de 100755
--- a/web/update.cgi
+++ b/web/update.cgi
@@ -1,6 +1,7 @@
 #!/usr/bin/perl
 
-# (c) 1999 Debian and Randolph Chung. Licensed under the GPL. <tausq@debian.org>
+# $Id: update.cgi,v 1.5 1999/12/13 04:56:48 tausq Exp $
+# (c) 1999 Randolph Chung. Licensed under the GPL. <tausq@debian.org>
 
 use lib '.';
 use strict vars;
@@ -93,6 +94,11 @@ if (!($query->param('doupdate'))) {
   # Actually update stuff...
   my ($newpassword, $newstaddress);
   
+  if (($query->param('labeledurl')) && 
+      ($query->param('labeledurl') !~ /^https?:\/\//i)) {
+    &Util::HTMLError("Your homepage URL is invalid");
+  }
+  
   if ($query->param('newpass') && $query->param('newpassvrfy')) {
     if ($query->param('newpass') ne $query->param('newpassvrfy')) {
       # passwords don't match...