diff options
| author | jim-p <jimp@pfsense.org> | 2015-07-01 11:06:25 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2015-07-01 11:06:25 -0400 |
| commit | ae142a104910ac810102abb69e24adf7b8811784 (patch) | |
| tree | 533a904b86ddff5d6b226d07fd9debe9d9357181 | |
| parent | 342f509028bc675c81172fb89275fd60ec761399 (diff) | |
| download | pfsense-ae142a104910ac810102abb69e24adf7b8811784.zip pfsense-ae142a104910ac810102abb69e24adf7b8811784.tar.gz | |
Encode ca/cert info in openvpn_wizard.inc
| -rw-r--r-- | usr/local/www/wizards/openvpn_wizard.inc | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/usr/local/www/wizards/openvpn_wizard.inc b/usr/local/www/wizards/openvpn_wizard.inc index 4603aa7..ee530a2 100644 --- a/usr/local/www/wizards/openvpn_wizard.inc +++ b/usr/local/www/wizards/openvpn_wizard.inc @@ -198,6 +198,10 @@ function step7_submitphpaction() { } } + if (preg_match("/[\?\>\<\&\/\\\"\']/", $_POST['descr'])) { + $input_errors[] = "The field 'Descriptive Name' contains invalid characters."; + } + if (empty($_POST['descr']) || empty($_POST['keylength']) || empty($_POST['lifetime']) || empty($_POST['country']) || empty($_POST['state']) || empty($_POST['city']) || empty($_POST['organization']) || empty($_POST['email'])) { @@ -297,6 +301,10 @@ function step9_submitphpaction() { } } + if (preg_match("/[\?\>\<\&\/\\\"\']/", $_POST['descr'])) { + $input_errors[] = "The field 'Descriptive Name' contains invalid characters."; + } + if (empty($_POST['descr']) || empty($_POST['keylength']) || empty($_POST['lifetime']) || empty($_POST['country']) || empty($_POST['state']) || empty($_POST['city']) || empty($_POST['organization']) || empty($_POST['email'])) { |
