瀏覽代碼

Update RegisterController, validate username against restricted names

Daniel Supernault 7 年之前
父節點
當前提交
91fd53a4be
共有 1 個文件被更改,包括 12 次插入0 次删除
  1. 12 0
      app/Http/Controllers/Auth/RegisterController.php

+ 12 - 0
app/Http/Controllers/Auth/RegisterController.php

@@ -3,6 +3,7 @@
 namespace App\Http\Controllers\Auth;
 
 use App\User;
+use App\Util\Lexer\RestrictedNames;
 use App\Http\Controllers\Controller;
 use Illuminate\Support\Facades\Hash;
 use Illuminate\Support\Facades\Validator;
@@ -48,6 +49,8 @@ class RegisterController extends Controller
      */
     protected function validator(array $data)
     {
+        $this->validateUsername($data['username']);
+        
         return Validator::make($data, [
             'name' => 'required|string|max:255',
             'username' => 'required|alpha_dash|min:2|max:15|unique:users',
@@ -71,4 +74,13 @@ class RegisterController extends Controller
             'password' => Hash::make($data['password']),
         ]);
     }
+
+    public function validateUsername($username)
+    {
+        $restricted = RestrictedNames::get();
+
+        if(in_array($username, $restricted)) {
+            return abort(403);
+        }
+    }
 }