Escape shell argument correctly.

1 files changed, 5 insertions, 2 deletions

diff --git a/usr/local/www/interfaces_wlan_scan.php b/usr/local/www/interfaces_wlan_scan.php
index cecda93..e5eb791 100755
--- a/usr/local/www/interfaces_wlan_scan.php
+++ b/usr/local/www/interfaces_wlan_scan.php
@@ -43,8 +43,11 @@ include("head.inc");
 <?php include("fbegin.inc"); ?>
 <p class="pgtitle"><?=$pgtitle?></p>
 
-echo "Scanning nodes... One moment please...";
-$scan_nodes = `/sbin/ifconfig {$_GET['interface']} scan`;
+$interface = escapeshellarg($_GET['interface']);
+
+echo gettext("Scanning nodes... One moment please...");
+$scan_nodes = `/sbin/ifconfig {$interface} scan`;
+
 echo "<P>Available nodes:<PRE>";
 echo $scan_nodes;
 echo "</PRE>";