【安全加密】入库防护：玩家输入的参数校验与拦截

-- 输入校验：空串、超长、危险符号三类拦截
local BAD_PATTERN = "[;'\"]|/%*|%-%-"
local function checkInput(text, maxLen)
    if type(text) ~= "string" or #text == 0 then
        return false, "EMPTY"
    end
    if #text > maxLen then
        return false, "TOOLONG"
    end
    if string.find(text, BAD_PATTERN) then
        return false, "RISK"
    end
    return true, ""
end

-- 招募语发布：先校验再写入
local player = class(actor)
local ok, reason = checkInput(recruitText, 60)
if not ok then
    local cnt = tonumber(getplayvar(player, "HUMAN", "InputRisk") or 0) + 1
    setplayvar(player, "HUMAN", "InputRisk", cnt, true)
    sendmsg(player, 1, 0, "内容含有受限字符（" .. reason .. "），请调整后再发布。")
    return
end
setplayvar(player, "HUMAN", "RecruitText", recruitText, true)
sendmsg(player, 1, 0, "招募语已更新。")