From 65d28c7d263efbf4cf95f16c981ee6223f351125 Mon Sep 17 00:00:00 2001
From: "Nicolas A. Tonne" <nixatto@gmail.com>
Date: Thu, 12 Feb 2015 18:37:03 +0100
Subject: [PATCH] No special chars in chan name, but only in html5

---
 php/nochan.php | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/php/nochan.php b/php/nochan.php
index 58e44c47..e0f208b5 100755
--- a/php/nochan.php
+++ b/php/nochan.php
@@ -55,16 +55,17 @@ foreach($fil as $files){
 				<img id="zicon" src="static/favicon.png">
 				<div class="fchan nomargin">Zöff</div>
 				<form name="ufo" action="" class="daform nomargin" id="base" method="get" onsubmit="null;" >
-					<input title="Type channel name here to create or listen to a channel" list="searches" id="search" name="chan" type="text" class="search_input innbox" spellcheck="false" maxlength="15" placeholder="Type Channel Name" autofocus/>
+					<input title="Type channel name here to create or listen to a channel.
+					 Only alphanumerical chars. [a-zA-Z0-9]+" list="searches" id="search" name="chan" required pattern="[a-zA-Z0-9]+" type="text" class="search_input innbox" spellcheck="false" maxlength="15" placeholder="Type Channel Name" autofocus/>
 					<datalist id="searches">
-					  <?php foreach($all_channels as $channel){echo "<option value='".htmlspecialchars(urldecode($channel))."'> ";} ?>
+					  <?php foreach($all_channels as $channel){echo "<option value='".htmlspecialchars($channel)."'> ";} ?>
 					</datalist>
 				</form>
 
 			</div>
 			<center>
 			<div class="channels" id="channels">Active Channels<br>
-				<?php foreach($channels as $channel){echo "<a class='channel' href='./".htmlspecialchars($channel)."'>".htmlspecialchars(urldecode($channel))."</a>";} ?>
+				<?php foreach($channels as $channel){echo "<a class='channel' href='./".htmlspecialchars($channel)."'>".htmlspecialchars($channel)."</a>";} ?>
 			</div>
 			</center>
 		</div>