Fixed small issues

diff --git a/com.woltlab.wcf/templates/membersList.tpl b/com.woltlab.wcf/templates/membersList.tpl
index f9ddba4d3166d6e5598d15a771099804cd572e4f..45e435113ad3718044a8199ac4049d009fd07ccb 100644 (file)
--- a/com.woltlab.wcf/templates/membersList.tpl
+++ b/com.woltlab.wcf/templates/membersList.tpl
@@ -41,7 +41,7 @@
 {capture assign='sidebar'}
        {assign var=encodedLetter value=$letter|rawurlencode}
        <div class="jsOnly">
-               <form method="get" action="{if $searchID}{link controller='MembersList' id=$searchID}{/link}{else}{link controller='MembersList'}{/link}{/if}">
+               <form method="post" action="{link controller='UserSearch'}{/link}">
                        <fieldset>
                                <legend><label for="searchUsername">{lang}wcf.user.search{/lang}</label></legend>
                                
@@ -49,6 +49,7 @@
                                        <dt></dt>
                                        <dd>
                                                <input type="text" id="searchUsername" name="username" class="long" placeholder="{lang}wcf.user.username{/lang}" />
+                                               {@SECURITY_TOKEN_INPUT_TAG}
                                        </dd>
                                </dl>
                        </fieldset>

diff --git a/wcfsetup/install/files/lib/system/option/BirthdayOptionType.class.php b/wcfsetup/install/files/lib/system/option/BirthdayOptionType.class.php
index 3e14bb3bf99e9edb2075caa70581f6cb746d88d3..91f33fac1e1c3d0c7557fc52433d1ae24121bb65 100644 (file)
--- a/wcfsetup/install/files/lib/system/option/BirthdayOptionType.class.php
+++ b/wcfsetup/install/files/lib/system/option/BirthdayOptionType.class.php
@@ -71,6 +71,8 @@ class BirthdayOptionType extends DateOptionType {
                
                $ageFrom = intval($value['ageFrom']);
                $ageTo = intval($value['ageTo']);
+               if ($ageFrom < 0 || $ageFrom > 120) return false;
+               if ($ageTo < 0 || $ageTo > 120) return false;
                if (!$ageFrom || !$ageTo) return false;
                
                $dateFrom = DateUtil::getDateTimeByTimestamp(TIME_NOW)->sub(new \DateInterval('P'.($ageTo + 1).'Y'))->add(new \DateInterval('P1D'));