From 92afde98effc8f3c3f81245d8f2e008d5b03dfa3 Mon Sep 17 00:00:00 2001
From: Marcel Werk <burntime@woltlab.com>
Date: Fri, 11 Oct 2013 15:53:10 +0200
Subject: [PATCH] Fixed small issues

---
 com.woltlab.wcf/templates/membersList.tpl                      | 3 ++-
 .../files/lib/system/option/BirthdayOptionType.class.php       | 2 ++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/com.woltlab.wcf/templates/membersList.tpl b/com.woltlab.wcf/templates/membersList.tpl
index f9ddba4d31..45e435113a 100644
--- a/com.woltlab.wcf/templates/membersList.tpl
+++ b/com.woltlab.wcf/templates/membersList.tpl
@@ -41,7 +41,7 @@
 {capture assign='sidebar'}
 	{assign var=encodedLetter value=$letter|rawurlencode}
 	<div class="jsOnly">
-		<form method="get" action="{if $searchID}{link controller='MembersList' id=$searchID}{/link}{else}{link controller='MembersList'}{/link}{/if}">
+		<form method="post" action="{link controller='UserSearch'}{/link}">
 			<fieldset>
 				<legend><label for="searchUsername">{lang}wcf.user.search{/lang}</label></legend>
 				
@@ -49,6 +49,7 @@
 					<dt></dt>
 					<dd>
 						<input type="text" id="searchUsername" name="username" class="long" placeholder="{lang}wcf.user.username{/lang}" />
+						{@SECURITY_TOKEN_INPUT_TAG}
 					</dd>
 				</dl>
 			</fieldset>
diff --git a/wcfsetup/install/files/lib/system/option/BirthdayOptionType.class.php b/wcfsetup/install/files/lib/system/option/BirthdayOptionType.class.php
index 3e14bb3bf9..91f33fac1e 100644
--- a/wcfsetup/install/files/lib/system/option/BirthdayOptionType.class.php
+++ b/wcfsetup/install/files/lib/system/option/BirthdayOptionType.class.php
@@ -71,6 +71,8 @@ class BirthdayOptionType extends DateOptionType {
 		
 		$ageFrom = intval($value['ageFrom']);
 		$ageTo = intval($value['ageTo']);
+		if ($ageFrom < 0 || $ageFrom > 120) return false;
+		if ($ageTo < 0 || $ageTo > 120) return false;
 		if (!$ageFrom || !$ageTo) return false;
 		
 		$dateFrom = DateUtil::getDateTimeByTimestamp(TIME_NOW)->sub(new \DateInterval('P'.($ageTo + 1).'Y'))->add(new \DateInterval('P1D'));
-- 
2.20.1