Project

General

Profile

« Previous | Next » 

Revision a5e950ae

Added by Jim Pingle almost 10 years ago

Encoding in system_advanced_sysctl.php

View differences:

usr/local/www/system_advanced_sysctl.php
194 194
						<?php foreach ($tunables as $i => $tunable):
195 195

  
196 196
								if (!isset($tunable['modified'])) {
197
									$i = $tunable['tunable'];
197
									$i = urlencode($tunable['tunable']);
198 198
								}
199 199
						?>
200 200
						<tr>
201 201
							<td class="listlr" ondblclick="document.location='system_advanced_sysctl.php?act=edit&amp;id=<?=$i;?>';">
202
								<?php echo $tunable['tunable']; ?>
202
								<?php echo htmlspecialchars($tunable['tunable']); ?>
203 203
							</td>
204 204
							<td class="listr" align="left" ondblclick="document.location='system_advanced_sysctl.php?act=edit&amp;id=<?=$i;?>';">
205
								<?php echo $tunable['descr']; ?>
205
								<?php echo htmlspecialchars($tunable['descr']); ?>
206 206
							</td>
207 207
							<td class="listr" align="left" ondblclick="document.location='system_advanced_sysctl.php?act=edit&amp;id=<?=$i;?>';">
208
								<?php echo $tunable['value']; ?>
208
								<?php echo htmlspecialchars($tunable['value']); ?>
209 209
								<?php
210 210
									if ($tunable['value'] == "default") {
211 211
										echo "(" . get_default_sysctl_value($tunable['tunable']) . ")";
......
263 263
							<tr>
264 264
								<td width="22%" valign="top" class="vncellreq"><?=gettext("Tunable"); ?></td>
265 265
								<td width="78%" class="vtable">
266
									<input size="65" name="tunable" value="<?php echo $pconfig['tunable']; ?>" />
266
									<input size="65" name="tunable" value="<?php echo htmlspecialchars($pconfig['tunable']); ?>" />
267 267
								</td>
268 268
							</tr>
269 269
							<tr>
270 270
								<td width="22%" valign="top" class="vncellreq"><?=gettext("Description"); ?></td>
271 271
								<td width="78%" class="vtable">
272
									<textarea rows="7" cols="50" name="descr"><?php echo $pconfig['descr']; ?></textarea>
272
									<textarea rows="7" cols="50" name="descr"><?php echo htmlspecialchars($pconfig['descr']); ?></textarea>
273 273
								</td>
274 274
							</tr>
275 275
							<tr>
276 276
								<td width="22%" valign="top" class="vncellreq"><?=gettext("Value"); ?></td>
277 277
								<td width="78%" class="vtable">
278
									<input size="65" name="value" value="<?php echo $pconfig['value']; ?>" />
278
									<input size="65" name="value" value="<?php echo htmlspecialchars($pconfig['value']); ?>" />
279 279
								</td>
280 280
							</tr>
281 281
							<tr>

Also available in: Unified diff