1 files changed, 2 insertions, 0 deletions
diff --git a/www/commission/index.php b/www/commission/index.php
index ef8b68d..4c0ac81 100644
--- a/www/commission/index.php
+++ b/www/commission/index.php
@@ -74,6 +74,8 @@ if($_SERVER["REQUEST_METHOD"] == "POST"){
         $username_err = "Please enter a username.";
     } elseif ($userlen > 80) {
         $username_err = "mLinux username must not exceed 32 characters";
+    } elseif (strstr($username,"\"")) {
+        $username_err = "invalid character(s) in username";
     } else {
         syslog(LOG_ALERT, "Enter username check: $username");
         $id = chk_username($username);