Merge pull request #229 from michalsn/filter_data_on_register

Filter post data on registration
lonnieezell · May 12, 2020 · bbfb03f · bbfb03f
2 parents e5643f0 + 6d09e28
commit bbfb03f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/Controllers/AuthController.php b/src/Controllers/AuthController.php
@@ -164,7 +164,8 @@ public function attemptRegister()
 		}
 
 		// Save the user
-		$user = new User($this->request->getPost());
+		$allowedPostFields = array_merge(['password'], $this->config->validFields, $this->config->personalFields);
+		$user = new User($this->request->getPost($allowedPostFields));
 
 		$this->config->requireActivation !== false ? $user->generateActivateHash() : $user->activate();