Project

General

Profile

« Previous | Next » 

Revision daab67a1

Added by Scott Ullrich over 14 years ago

Fix misc XSS issues from davey b

View differences:

usr/local/www/diag_logs_vpn.php
49 49
if (!$nentries)
50 50
	$nentries = 50;
51 51

  
52
$vpntype = ($_GET['vpntype']) ? $_GET['vpntype'] : "pptp";
53
$mode = ($_GET['mode']) ? $_GET['mode'] : "login";
52
$vpntype = (htmlspecialchars($_GET['vpntype'])) ? htmlspecialchars($_GET['vpntype']) : "pptp";
53
$mode = (htmlspecialchars($_GET['mode'])) ? htmlspecialchars($_GET['mode']) : "login";
54 54

  
55 55
if ($_POST['clear']) 
56 56
	clear_log_file("/var/log/vpn.log");

Also available in: Unified diff