diff options
| author | Sergio Carlos Morales Angeles <carloschilazo@gmail.com> | 2017-04-20 09:40:24 -0500 |
|---|---|---|
| committer | Renato Botelho <renato@netgate.com> | 2017-04-20 14:16:17 -0300 |
| commit | 7f8e4d5f36a12406b114a0eb318a3bb5f45213fa (patch) | |
| tree | 598aaf72e668d6b068ed1be81ca8cb2a6fe13daa /src/usr/local | |
| parent | c14573f74d845754aa48d1d5f011db06bf2191e5 (diff) | |
| download | pfsense-7f8e4d5f36a12406b114a0eb318a3bb5f45213fa.zip pfsense-7f8e4d5f36a12406b114a0eb318a3bb5f45213fa.tar.gz | |
Escape IPv6 when passed to ndp delete command
(cherry picked from commit 1d92faa34f7c9aaa97b1983f273d2d73285befb5)
Diffstat (limited to 'src/usr/local')
| -rw-r--r-- | src/usr/local/www/diag_ndp.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/usr/local/www/diag_ndp.php b/src/usr/local/www/diag_ndp.php index 496823b..39d7ba4 100644 --- a/src/usr/local/www/diag_ndp.php +++ b/src/usr/local/www/diag_ndp.php @@ -72,7 +72,7 @@ require_once("guiconfig.inc"); if (isset($_POST['deleteentry'])) { $ip = $_POST['deleteentry']; if (is_ipaddrv6($ip)) { - $commandReturnValue = mwexec(NDP_BINARY_PATH . " -d " . $ip, true); + $commandReturnValue = mwexec(NDP_BINARY_PATH . " -d " . escapeshellarg($ip), true); $deleteSucceededFlag = ($commandReturnValue == 0); } else { $deleteSucceededFlag = false; |
