summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2014-02-17 09:48:00 +0000
committerErmal <eri@pfsense.org>2014-02-17 09:48:36 +0000
commit378296af776e28c47652fd1268708be73f5f19ad (patch)
tree79ca6a46f7e46abb23020abc850e4f37310dca2e
parent2b76f145e40e47d06c7441ae8a419aeae9cc811b (diff)
downloadpfsense-378296af776e28c47652fd1268708be73f5f19ad.zip
pfsense-378296af776e28c47652fd1268708be73f5f19ad.tar.gz
Use descr as the field name for voucher description so it gets CDATA protection. Fixes #3441
-rw-r--r--usr/local/www/services_captiveportal_vouchers_edit.php6
1 files changed, 3 insertions, 3 deletions
diff --git a/usr/local/www/services_captiveportal_vouchers_edit.php b/usr/local/www/services_captiveportal_vouchers_edit.php
index 9cd85e8..daf5565 100644
--- a/usr/local/www/services_captiveportal_vouchers_edit.php
+++ b/usr/local/www/services_captiveportal_vouchers_edit.php
@@ -76,7 +76,7 @@ if (isset($id) && $a_roll[$id]) {
$pconfig['number'] = $a_roll[$id]['number'];
$pconfig['count'] = $a_roll[$id]['count'];
$pconfig['minutes'] = $a_roll[$id]['minutes'];
- $pconfig['comment'] = $a_roll[$id]['comment'];
+ $pconfig['descr'] = $a_roll[$id]['descr'];
}
$maxnumber = (1<<$config['voucher'][$cpzone]['rollbits']) -1; // Highest Roll#
@@ -118,7 +118,7 @@ if ($_POST) {
$rollent['zone'] = $_POST['zone'];
$rollent['number'] = $_POST['number'];
$rollent['minutes'] = $_POST['minutes'];
- $rollent['comment'] = $_POST['comment'];
+ $rollent['descr'] = $_POST['descr'];
/* New Roll or modified voucher count: create bitmask */
$voucherlck = lock("voucher{$cpzone}");
@@ -194,7 +194,7 @@ include("head.inc");
<tr>
<td width="22%" valign="top" class="vncell"><?=gettext("Comment"); ?></td>
<td width="78%" class="vtable">
- <?=$mandfldhtml;?><input name="comment" type="text" class="formfld" id="comment" size="60" value="<?=htmlspecialchars($pconfig['comment']);?>">
+ <?=$mandfldhtml;?><input name="descr" type="text" class="formfld" id="descr" size="60" value="<?=htmlspecialchars($pconfig['descr']);?>">
<br>
<span class="vexpl"><?=gettext("Can be used to further identify this roll. Ignored by the system"); ?>.</span>
</td>
OpenPOWER on IntegriCloud