diff options
| author | jim-p <jimp@netgate.com> | 2018-08-22 10:32:20 -0400 |
|---|---|---|
| committer | jim-p <jimp@netgate.com> | 2018-08-22 10:32:52 -0400 |
| commit | b6f6210a220bb206fd22ac34b306f007afedb01f (patch) | |
| tree | bc7f7e905751cd75f505e497a4cb6289b006c8a5 /src | |
| parent | 7dc56c76972cc3d7834572c9d676e3f729f45ad6 (diff) | |
| download | pfsense-b6f6210a220bb206fd22ac34b306f007afedb01f.zip pfsense-b6f6210a220bb206fd22ac34b306f007afedb01f.tar.gz | |
Use ctype_xdigit() instead of is_numeric() to validate hex. Issue #8824
Diffstat (limited to 'src')
| -rwxr-xr-x | src/usr/local/www/interfaces.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/usr/local/www/interfaces.php b/src/usr/local/www/interfaces.php index 7a33904..751fcd4 100755 --- a/src/usr/local/www/interfaces.php +++ b/src/usr/local/www/interfaces.php @@ -489,7 +489,7 @@ if ($_POST['apply']) { unset($input_errors); $pconfig = $_POST; - if (is_numeric("0x" . $_POST['track6-prefix-id--hex'])) { + if (ctype_xdigit($_POST['track6-prefix-id--hex'])) { $pconfig['track6-prefix-id'] = intval($_POST['track6-prefix-id--hex'], 16); } else { $pconfig['track6-prefix-id'] = 0; @@ -1480,7 +1480,7 @@ if ($_POST['apply']) { $wancfg['track6-interface'] = $_POST['track6-interface']; if ($_POST['track6-prefix-id--hex'] === "") { $wancfg['track6-prefix-id'] = 0; - } else if (is_numeric("0x" . $_POST['track6-prefix-id--hex'])) { + } else if (ctype_xdigit($_POST['track6-prefix-id--hex'])) { $wancfg['track6-prefix-id'] = intval($_POST['track6-prefix-id--hex'], 16); } else { $wancfg['track6-prefix-id'] = 0; |
