Accounts entry. We only accept 0-9 and a dot if $accounts_alpha = 0 (default)

diff --git a/gl/manage/gl_accounts.php b/gl/manage/gl_accounts.php
index d211a491798cbbc7d0f60efa4f972ff9de54dfb1..0d9b2c755ea1ba9b1d2044500eefea3d46040a29 100644 (file)
--- a/gl/manage/gl_accounts.php
+++ b/gl/manage/gl_accounts.php
@@ -58,8 +58,8 @@ if (isset($_POST['add']) || isset($_POST['update']))
                $input_error = 1;
                display_error( _("The account name cannot be empty."));
                set_focus('account_name');
-       } 
-       elseif (!$accounts_alpha && !is_numeric($_POST['account_code'])) 
+       }  
+       elseif (!$accounts_alpha && !preg_match("/^[0-9.]+$/",$_POST['account_code'])) // we only allow 0-9 and a dot
        {
            $input_error = 1;
            display_error( _("The account code must be numeric."));