From 496f94249c7b20dcb776371b3c1ab53301733041 Mon Sep 17 00:00:00 2001
From: Arc <33088785+arcbtc@users.noreply.github.com>
Date: Tue, 21 Jan 2020 19:47:22 +0000
Subject: [PATCH] Update __init__.py

---
 lnbits/__init__.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/lnbits/__init__.py b/lnbits/__init__.py
index 463471bf7..6e458805a 100644
--- a/lnbits/__init__.py
+++ b/lnbits/__init__.py
@@ -118,6 +118,13 @@ def wallet():
     usr = request.args.get("usr")
     wallet_id = request.args.get("wal")
     wallet_name = request.args.get("nme")
+    
+    if usr:
+        if not len(usr) > 20:
+            return redirect(url_for("home"))
+    if wallet_id:
+        if not len(wallet_id) > 20:
+            return redirect(url_for("home"))
 
     # just usr: return a the first user wallet or create one if none found
     # usr and wallet_id: return that wallet or create it if it doesn't exist