Fixed bug #126497 + problem with error handling in src/addressbook.php.

[squirrelmail.git] / functions / addressbook.php

diff --git a/functions/addressbook.php b/functions/addressbook.php
index 595507cc428b398dc434970942d96903aadd8e32..8e20224c1945df4a9817e88407fb8034891c7b38 100644 (file)
--- a/functions/addressbook.php
+++ b/functions/addressbook.php
@@ -335,13 +335,19 @@
            $this->error = _("E-mail address is missing");
            return false;
         }
+
+        if(eregi("[\: \|\#\"\!]", $userdata["nickname"])) {
+           $this->error = _("Nickname contain illegal characters");
+           return false;
+        }
+
         if(empty($userdata["nickname"])) {
            $userdata["nickname"] = $userdata["email"];
         }
 
         // Check that specified backend is writable
         if(!$this->backends[$bnum]->writeable) {
-           $this->error = sprintf(_("Addressbook %s is read-only", $bnum));
+           $this->error = _("Addressbook is read-only");;
            return false;
         }