diff --git a/library/ajax/edit_user_profile.php b/library/ajax/edit_user_profile.php index 1c6cfeefb..ba51fd847 100644 --- a/library/ajax/edit_user_profile.php +++ b/library/ajax/edit_user_profile.php @@ -144,6 +144,9 @@ switch ($field) { case 'user_points': $value = (float)str_replace(',', '.', $this->request['value']); $value = sprintf('%.2f', $value); + if (strlen(strstr($value, '.', true)) > 14) { + $this->ajax_die($lang['WRONG_INPUT']); + } $this->response['new_value'] = $value; break;