X-Git-Url: http://git.treefish.org/banana.git/blobdiff_plain/78533c089d9413327f981cb2b20090a28f25e5e5..40b00377877560ee2c6c4d5a771824059deac819:/include/usercheck.inc?ds=inline

diff --git a/include/usercheck.inc b/include/usercheck.inc
index 27cecff..26ab851 100644
--- a/include/usercheck.inc
+++ b/include/usercheck.inc
@@ -1,9 +1,16 @@
 <?php
+
   require 'db.inc';
+  require 'common.inc';
 
   $mnumber = $_POST['mnumber'];
   $password = $_POST['password'];
 
+  if(! is_numeric($mnumber)) {
+    block("red", "Matr.nummer has to be numeric!");
+    exit;
+  }
+
   if($db->query("SELECT COUNT(*) FROM students WHERE mnumber = $mnumber")->fetch(PDO::FETCH_NUM)[0] == 0) {
     print '<table bgcolor="red">';
       print '<tr><th><b><font color="white">Mat.nummer not found</font></b></th><tr>';