diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2008-11-25 04:02:55 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2008-11-25 04:02:55 +0000 |
| commit | e0bbaf4d634935d86cf53c36ab1fbf2d52b9e670 (patch) | |
| tree | 7cf4a494a3c5b3d73e563b93278a032d34609476 | |
| parent | 4d59f5fa2641b111f6cedf1edf88d657c1c0da56 (diff) | |
| download | pfsense-e0bbaf4d634935d86cf53c36ab1fbf2d52b9e670.zip pfsense-e0bbaf4d634935d86cf53c36ab1fbf2d52b9e670.tar.gz | |
Escape posted values
| -rwxr-xr-x | usr/local/www/interfaces.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/interfaces.php b/usr/local/www/interfaces.php index 55fb96f..08b3fca 100755 --- a/usr/local/www/interfaces.php +++ b/usr/local/www/interfaces.php @@ -1412,7 +1412,7 @@ $types = array("none" => "None", "static" => "Static", "dhcp" => "DHCP", "pppoe" var descr = $('gatewaydescr').getValue(); gatewayip = $('gatewayip').getValue(); var url = "system_gateways_edit.php"; - var pars = 'interface=' + iface + '&name=' + name + '&descr=' + descr + '&gateway=' + gatewayip; + var pars = 'interface=' + escape(iface) + '&name=' + escape(name) + '&descr=' + escape(descr) + '&gateway=' + escape(gatewayip); var myAjax = new Ajax.Request( url, { |
