diff --git a/library/ajax/edit_user_profile.php b/library/ajax/edit_user_profile.php index 156bc92f..65aab1d2 100644 --- a/library/ajax/edit_user_profile.php +++ b/library/ajax/edit_user_profile.php @@ -154,10 +154,9 @@ switch ($field) break; case 'user_points': - $value = htmlCHR($value); $value = (float) str_replace(',', '.', $this->request['value']); $value = sprintf('%.2f', $value); - if (strlen(strstr($value, '.', true)) > 14) + if ($value < 0.0 || strlen(strstr($value, '.', true)) > 14) { $this->ajax_die($lang['WRONG_INPUT']); }