From 98c8f519a64e4b43ba6621b2aac1308e86072cf1 Mon Sep 17 00:00:00 2001
From: "Michael Kaufmann (d00p)" <d00p@froxlor.org>
Date: Wed, 21 Sep 2016 07:38:07 +0200
Subject: [PATCH] validate customer entered subdomains, fixes #1653

Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>
---
 customer_domains.php | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/customer_domains.php b/customer_domains.php
index 66fbc0e1..6849c0e8 100644
--- a/customer_domains.php
+++ b/customer_domains.php
@@ -277,6 +277,13 @@ if ($page == 'overview') {
 
 				$completedomain = $subdomain . '.' . $domain;
 
+				if (Settings::Get('system.validate_domain') && ! validateDomain($completedomain)) {
+					standard_error(array(
+						'stringiswrong',
+						'mydomain'
+					));
+				}
+
 				if ($completedomain == Settings::Get('system.hostname')) {
 					standard_error('admin_domain_emailsystemhostname');
 				}