From 0210000e3496d932d8dc504fcd905ebd309b2730 Mon Sep 17 00:00:00 2001 From: Roman Kelesidis Date: Thu, 10 Aug 2023 22:45:29 +0700 Subject: [PATCH] Minor improvements (#853) --- library/ajax/edit_user_profile.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/library/ajax/edit_user_profile.php b/library/ajax/edit_user_profile.php index 1c6cfeefb..ba51fd847 100644 --- a/library/ajax/edit_user_profile.php +++ b/library/ajax/edit_user_profile.php @@ -144,6 +144,9 @@ switch ($field) { case 'user_points': $value = (float)str_replace(',', '.', $this->request['value']); $value = sprintf('%.2f', $value); + if (strlen(strstr($value, '.', true)) > 14) { + $this->ajax_die($lang['WRONG_INPUT']); + } $this->response['new_value'] = $value; break;