Project

General

Profile

« Previous | Next » 

Revision 990a271c

Added by Scott Ullrich almost 16 years ago

Make sure entered # is a integer and use htmlspecialchars()

View differences:

usr/local/www/services_dhcp.php
299 299
		$numbervalue = array();
300 300
		unset($config['dhcpd'][$if]['numberoptions']['item']);
301 301
		for($x=0; $x<isset($_POST["number{$x}"]); $x++) {
302
			$numbervalue['number'] = $_POST["number{$x}"];
303
			$numbervalue['value'] = $_POST["value{$x}"];
304
			$config['dhcpd'][$if]['numberoptions']['item'][] = $numbervalue;			
302
			if(is_int($_POST["number{$x}"])) {
303
				$numbervalue['number'] = htmlspecialchars($_POST["number{$x}"]);
304
				$numbervalue['value'] = htmlspecialchars($_POST["value{$x}"]);
305
				$config['dhcpd'][$if]['numberoptions']['item'][] = $numbervalue;
306
			}
305 307
		}
306 308
		$pconfig['numberoptions'] = $config['dhcpd'][$if]['numberoptions'];
307 309

  

Also available in: Unified diff