1 files changed, 5 insertions, 2 deletions
diff --git a/www/commission/index.php b/www/commission/index.php
index 4c0ac81..10e044e 100644
--- a/www/commission/index.php
+++ b/www/commission/index.php
@@ -75,7 +75,7 @@ if($_SERVER["REQUEST_METHOD"] == "POST"){
     } elseif ($userlen > 80) {
         $username_err = "mLinux username must not exceed 32 characters";
     } elseif (strstr($username,"\"")) {
-        $username_err = "invalid character(s) in username";
+        $username_err = "No &#34; allowed in username";
     } else {
         syslog(LOG_ALERT, "Enter username check: $username");
         $id = chk_username($username);
@@ -100,7 +100,10 @@ if($_SERVER["REQUEST_METHOD"] == "POST"){
     } elseif ($passlen > 4096) {
         $password_err = "Too long. Limit password length to 4096 characters";
         $password = "";
-
+    } elseif (strstr($password,"\"")) {
+        $password_err = "No &#34; allowed in password";
+        $mismatch = 0;
+        $password = "";
     } else {
         if ($save_passwordlen === 0) {
             $mismatch = 0;