summaryrefslogtreecommitdiffstats
path: root/src/usr/local/www/vpn_openvpn_server.php
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2015-12-01 09:55:31 -0500
committerjim-p <jimp@pfsense.org>2015-12-01 09:57:12 -0500
commit298ffc5eba7457bc7f8946458e99107a190a4507 (patch)
tree25f45f51b5434edab54a91dbaa36ae29ab85d586 /src/usr/local/www/vpn_openvpn_server.php
parent71eedb411efba350abc31dde4b6ecec3e3fa121a (diff)
downloadpfsense-298ffc5eba7457bc7f8946458e99107a190a4507.zip
pfsense-298ffc5eba7457bc7f8946458e99107a190a4507.tar.gz
Input validation for the Topology parameter. Issue #5526
Diffstat (limited to 'src/usr/local/www/vpn_openvpn_server.php')
-rw-r--r--src/usr/local/www/vpn_openvpn_server.php4
1 files changed, 4 insertions, 0 deletions
diff --git a/src/usr/local/www/vpn_openvpn_server.php b/src/usr/local/www/vpn_openvpn_server.php
index 023b5a6..9053ec3 100644
--- a/src/usr/local/www/vpn_openvpn_server.php
+++ b/src/usr/local/www/vpn_openvpn_server.php
@@ -413,6 +413,10 @@ if ($_POST) {
$input_errors[] = gettext("The field 'Concurrent connections' must be numeric.");
}
+ if (!array_key_exists($pconfig['topology'], $openvpn_topologies)) {
+ $input_errors[] = gettext("The field 'Topology' contains an invalid selection");
+ }
+
/* If we are not in shared key mode, then we need the CA/Cert. */
if ($pconfig['mode'] != "p2p_shared_key") {
$reqdfields = explode(" ", "caref certref");
OpenPOWER on IntegriCloud