daveappserver 0.6.20 → 0.6.21

package/appserver.js

@@ -1,4 +1,4 @@
-var myVersion = "0.6.20", myProductName = "daveAppServer";  
+var myVersion = "0.6.21", myProductName = "daveAppServer";  
 
 exports.start = startup; 
 exports.notifySocketSubscribers = notifySocketSubscribers;
@@ -1009,16 +1009,34 @@ function cleanFileStats (stats) { //4/19/21 by DW
 	function sendConfirmingEmail (email, screenname, flNewUser=false, urlRedirect, callback) {
 		email = utils.stringLower (email); //3/8/23 by DW
 		function getScreenname (callback) {
-			if (flNewUser) { //the caller had to provide it
-				config.isUserInDatabase (screenname, function (flInDatabase) {
-					if (flInDatabase) {
-						const message = "Can't create the user \"" + screenname + "\" because there already is a user with that name."
-						callback ({message});
-						}
-					else {
-						callback (undefined, screenname);
+			function containsIllegalCharacter (name) { //3/17/23 by DW
+				function isLegal (ch) {
+					return (isAlpha (ch) || isNumeric (ch) || (ch == "_"));
+					}
+				for (var i = 0; i < name.length; i++) {
+					let ch = name [i];
+					if (!isLegal (ch)) {
+						return (true);
 						}
-					});
+					}
+				return (false);
+				}
+			if (flNewUser) { //the caller had to provide it
+				if (containsIllegalCharacter (screenname)) { //3/17/23 by DW
+					const message = "Can't create the user \"" + screenname + "\" because only alpha, numeric and underscore characters are allowed in names."
+					callback ({message});
+					}
+				else {
+					config.isUserInDatabase (screenname, function (flInDatabase) {
+						if (flInDatabase) {
+							const message = "Can't create the user \"" + screenname + "\" because there already is a user with that name."
+							callback ({message});
+							}
+						else {
+							callback (undefined, screenname);
+							}
+						});
+					}
 				}
 			else { //we have to look it up
 				config.getScreenNameFromEmail (email, callback);

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "daveappserver",
 	"description": "Factored code that was appearing in all my servers.",
-	"version": "0.6.20",
+	"version": "0.6.21",
 	"main": "appserver.js",
 	"repository": {
 		"type" : "git",