diff --git a/data/web/inc/functions.admin.inc.php b/data/web/inc/functions.admin.inc.php index f9aee508..660aed69 100644 --- a/data/web/inc/functions.admin.inc.php +++ b/data/web/inc/functions.admin.inc.php @@ -19,7 +19,7 @@ function admin($_action, $_data = null) { $password = $_data['password']; $password2 = $_data['password2']; $active = intval($_data['active']); - if (!ctype_alnum(str_replace(array('_', '.', '-'), '', $username)) || empty ($username)) { + if (!ctype_alnum(str_replace(array('_', '.', '-'), '', $username)) || empty ($username) || $username == 'API') { $_SESSION['return'][] = array( 'type' => 'danger', 'log' => array(__FUNCTION__, $_action, $_data_log), diff --git a/data/web/inc/functions.domain_admin.inc.php b/data/web/inc/functions.domain_admin.inc.php index 9c29b561..00cb35fc 100644 --- a/data/web/inc/functions.domain_admin.inc.php +++ b/data/web/inc/functions.domain_admin.inc.php @@ -31,7 +31,7 @@ function domain_admin($_action, $_data = null) { ); return false; } - if (!ctype_alnum(str_replace(array('_', '.', '-'), '', $username)) || empty ($username)) { + if (!ctype_alnum(str_replace(array('_', '.', '-'), '', $username)) || empty ($username) || $username == 'API') { $_SESSION['return'][] = array( 'type' => 'danger', 'log' => array(__FUNCTION__, $_action, $_data_log),