fix: Limit chars on filename path

src/common/fs.rs

@@ -1,8 +1,19 @@
 use crate::error::Error;
 use std::path::PathBuf;
+use regex::Regex;
 
 pub fn local_path(partial_path: &str) -> Result<PathBuf, Error> {
     let exe_path = std::env::current_exe().map_err(|_| Error::Default)?;
     let exe_folder = exe_path.parent().ok_or(Error::Default)?;
     Ok(exe_folder.join(partial_path))
 }
+
+pub fn validate_path(partial_path: &str) -> Result<(), Error> {
+    match Regex::new(r"^[a-zA-Z0-9_.+\-]+$") {
+        Err(..) => Err(Error::RegexError),
+        Ok(regex) => match regex.is_match(partial_path) {
+            false => Err(Error::Default),
+            true => Ok(()),
+        },
+    }
+}

src/db/club/club.rs

@@ -50,6 +50,10 @@ pub fn club_info(club_id: u32) -> Result<Club, Error> {
 }
 
 pub fn club_create(club: &Club) -> Result<u32, Error> {
+    if let Some(image_url) = &club.image_url {
+        crate::common::fs::validate_path(image_url)?;
+    }
+
     let mut conn: PooledConn = get_pool_conn();
     let stmt = conn.prep(
         "INSERT INTO clubs (club_key, name, description, disciplines, image_url, chairman)
@@ -71,6 +75,10 @@ pub fn club_create(club: &Club) -> Result<u32, Error> {
 }
 
 pub fn club_edit(club_id: u32, club: &Club) -> Result<(), Error> {
+    if let Some(image_url) = &club.image_url {
+        crate::common::fs::validate_path(image_url)?;
+    }
+
     let mut conn: PooledConn = get_pool_conn();
     let stmt = conn.prep(
         "UPDATE clubs SET