user_edit_validate

• Drupal 4.6
• Drupal 4.7
• Drupal 5
• Drupal 6

Versions

4.6

user_edit_validate($uid, &$edit)

4.7 – 5

user_edit_validate($form_id, $form_values)

6

user_edit_validate($form, &$form_state)

Code

modules/user/user.pages.inc, line 340

<?php
function user_edit_validate($form, &$form_state) {
  user_module_invoke('validate', $form_state['values'], $form_state['values']['_account'], $form_state['values']['_category']);
  // Validate input to ensure that non-privileged users can't alter protected data.
  if ((!user_access('administer users') && array_intersect(array_keys($form_state['values']), array('uid', 'init', 'session'))) || (!user_access('administer permissions') && isset($form_state['values']['roles']))) {
    watchdog('security', 'Detected malicious attempt to alter protected user fields.', array(), WATCHDOG_WARNING);
    // set this to a value type field
    form_set_error('category', t('Detected malicious attempt to alter protected user fields.'));
  }
}
?>

Login or register to post comments