[Phpgroupware-cvs] [21219] Fixing CVE-2010-0404, update the CHANGELOG, prepare the already done 16.016 release

[Caeies]

Revision: 21219
          
http://svn.sv.gnu.org/viewvc/?view=rev&root=phpgroupware&revision=21219
Author:   Caeies
Date:     2010-06-02 09:22:22 +0000 (Wed, 02 Jun 2010)
Log Message:
-----------
Fixing CVE-2010-0404, update the CHANGELOG, prepare the already done 16.016 
release

Modified Paths:
--------------
    modules/admin/branches/branch_0_9_16/inc/class.boaccounts.inc.php

Modified: modules/admin/branches/branch_0_9_16/inc/class.boaccounts.inc.php
===================================================================
--- modules/admin/branches/branch_0_9_16/inc/class.boaccounts.inc.php   
2010-06-02 09:21:59 UTC (rev 21218)
+++ modules/admin/branches/branch_0_9_16/inc/class.boaccounts.inc.php   
2010-06-02 09:22:22 UTC (rev 21219)
@@ -715,7 +715,11 @@
                                $error[$totalerrors] = lang('You must enter a 
loginid');
                                $totalerrors++;
                        }
-
+                       if(!sanitize($_userData['account_lid'], 'alphanumeric'))
+                       {
+                               $error[$totalerrors] = lang('The login should 
be alphanumeric only!');
+                               $totalerrors++;
+                       }
                        if ($_userData['old_loginid'] != 
$_userData['account_lid']) 
                        {
                                if 
($GLOBALS['phpgw']->accounts->exists($_userData['account_lid']))