diff options
author | jim-p <jimp@pfsense.org> | 2016-06-22 12:32:22 -0400 |
---|---|---|
committer | jim-p <jimp@pfsense.org> | 2016-06-22 12:32:22 -0400 |
commit | edd4c6337dbc8316bcfb2e9c1e50b9b00a25be5b (patch) | |
tree | ca2a0db5cc5ebb8b29ca2cdf08a97208aa2ccb37 /src | |
parent | 94b5eb1f3ee5960d44938abc200eccf7eabab3d5 (diff) | |
download | pfsense-edd4c6337dbc8316bcfb2e9c1e50b9b00a25be5b.zip pfsense-edd4c6337dbc8316bcfb2e9c1e50b9b00a25be5b.tar.gz |
% and / are also allowed in values
Diffstat (limited to 'src')
-rw-r--r-- | src/usr/local/www/system_advanced_sysctl.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/usr/local/www/system_advanced_sysctl.php b/src/usr/local/www/system_advanced_sysctl.php index 6467f25..c069079 100644 --- a/src/usr/local/www/system_advanced_sysctl.php +++ b/src/usr/local/www/system_advanced_sysctl.php @@ -142,8 +142,8 @@ if ($_POST) { if (!$_POST['tunable'] || !isset($_POST['value'])) { $input_errors[] = gettext("Both a name and a value must be specified."); - } else if (preg_match("/[^a-zA-Z0-9.\-_]/", $_POST['value'])) { - $input_errors[] = gettext("The value may only contain alphanumeric characters, - and _."); + } else if (preg_match("/[^a-zA-Z0-9.\-_%\/]/", $_POST['value'])) { + $input_errors[] = gettext("The value may only contain alphanumeric characters, -, _, %, and /."); } else { $tunableent['tunable'] = htmlspecialchars($_POST['tunable']); $tunableent['value'] = htmlspecialchars($_POST['value']); |