From 6db14a71afd311f96ca28a13d11fb51430781a5e Mon Sep 17 00:00:00 2001 From: LittleSheep Date: Thu, 20 Feb 2025 23:04:03 +0800 Subject: [PATCH] :necktie: Prevent user from creating account with name that only includes number --- pkg/internal/http/api/accounts_api.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkg/internal/http/api/accounts_api.go b/pkg/internal/http/api/accounts_api.go index c004771..729987b 100644 --- a/pkg/internal/http/api/accounts_api.go +++ b/pkg/internal/http/api/accounts_api.go @@ -205,6 +205,9 @@ func doRegister(c *fiber.Ctx) error { data.Nick = strings.TrimSpace(data.Nick) data.Email = strings.TrimSpace(data.Email) } + if _, err := strconv.Atoi(data.Name); err == nil { + return fiber.NewError(fiber.StatusBadRequest, "invalid account name, cannot be pure number") + } if !services.ValidateAccountName(data.Nick, 4, 24) { return fiber.NewError(fiber.StatusBadRequest, "invalid account nick, length requires 4 to 24") }