Project

General

Profile

« Previous | Next » 

Revision daab67a1

Added by Scott Ullrich over 14 years ago

Fix misc XSS issues from davey b

View differences:

usr/local/www/firewall_shaper.php
65 65 
	if ($_GET['queue'])
66 66 
        	$qname = trim($_GET['queue']);
67 67 
        if ($_GET['interface'])
68 
                $interface = trim($_GET['interface']);
68 
                $interface = htmlspecialchars(trim($_GET['interface']));
69 69 
        if ($_GET['action'])
70 
                $action = $_GET['action'];
70 
                $action = htmlspecialchars($_GET['action']);
71 71 
}
72 72 
if ($_POST) {
73 73 
	if ($_POST['name'])
74 
        	$qname = trim($_POST['name']);
74 
        	$qname = htmlspecialchars(trim($_POST['name']));
75 75 
        if ($_POST['interface'])
76 
                $interface = trim($_POST['interface']);
76 
                $interface = htmlspecialchars(trim($_POST['interface']));
77 77 
	if ($_POST['parentqueue'])
78 
		$parentqueue = trim($_POST['parentqueue']);
78 
		$parentqueue = htmlspecialchars(trim($_POST['parentqueue']));
79 79 
}
80 80 

  		




  81
  81
  
    
if ($interface) {


  		












Also available in:  Unified diff