diff options
author | Scott Ullrich <sullrich@pfsense.org> | 2008-02-26 17:34:29 +0000 |
---|---|---|
committer | Scott Ullrich <sullrich@pfsense.org> | 2008-02-26 17:34:29 +0000 |
commit | 8d0632cf250e563ad722eb69ed2526a120e728b0 (patch) | |
tree | bf8ec2a4f1f41a8fbe1e1808e661ab8d5808c396 /usr/local/www/diag_dump_states.php | |
parent | 49ec6bbb771536f1df2cf7413d3422385c75019a (diff) | |
download | pfsense-8d0632cf250e563ad722eb69ed2526a120e728b0.zip pfsense-8d0632cf250e563ad722eb69ed2526a120e728b0.tar.gz |
Use escapeshellarg() instead of htmlentities()
Diffstat (limited to 'usr/local/www/diag_dump_states.php')
-rwxr-xr-x | usr/local/www/diag_dump_states.php | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/usr/local/www/diag_dump_states.php b/usr/local/www/diag_dump_states.php index fffdc2b..5ee7d13 100755 --- a/usr/local/www/diag_dump_states.php +++ b/usr/local/www/diag_dump_states.php @@ -31,10 +31,10 @@ require_once("guiconfig.inc"); $pgtitle = array("Diagnostics","Show States"); include("head.inc"); -$srcip = htmlentities($_GET['srcip']); -$dstip = htmlentities($_GET['dstip']); -$action = htmlentities($_GET['action']); -$filter = htmlentities($_GET['filter']); +$srcip = escapeshellarg($_GET['srcip']); +$dstip = escapeshellarg($_GET['dstip']); +$action = escapeshellarg($_GET['action']); +$filter = escapeshellarg($_GET['filter']); /* handle AJAX operations */ if($_GET['action']) { |