fix: add missing validation for group name

codeigniter4 · Aug 21, 2024 · c003977 · c003977
1 parent f8c104c
commit c003977
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/Commands/User.php b/src/Commands/User.php
@@ -603,6 +603,11 @@ private function addgroup($group = null, $username = null, $email = null): void
             $group = $this->prompt('Group', null, 'required');
         }
 
+        // Validate the group
+        if (! $this->validateGroup($group)) {
+            throw new CancelException('Invalid group: "' . $group . '"');
+        }
+
         $user = $this->findUser('Add user to group', $username, $email);
 
         $confirm = $this->prompt(
@@ -635,6 +640,11 @@ private function removegroup($group = null, $username = null, $email = null): vo
             $group = $this->prompt('Group', null, 'required');
         }
 
+        // Validate the group
+        if (! $this->validateGroup($group)) {
+            throw new CancelException('Invalid group: "' . $group . '"');
+        }
+
         $user = $this->findUser('Remove user from group', $username, $email);
 
         $confirm = $this->prompt(