summaryrefslogtreecommitdiffstats
path: root/usr/local/www/diag_dump_states.php
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2008-02-26 17:34:29 +0000
committerScott Ullrich <sullrich@pfsense.org>2008-02-26 17:34:29 +0000
commit8d0632cf250e563ad722eb69ed2526a120e728b0 (patch)
treebf8ec2a4f1f41a8fbe1e1808e661ab8d5808c396 /usr/local/www/diag_dump_states.php
parent49ec6bbb771536f1df2cf7413d3422385c75019a (diff)
downloadpfsense-8d0632cf250e563ad722eb69ed2526a120e728b0.zip
pfsense-8d0632cf250e563ad722eb69ed2526a120e728b0.tar.gz
Use escapeshellarg() instead of htmlentities()
Diffstat (limited to 'usr/local/www/diag_dump_states.php')
-rwxr-xr-xusr/local/www/diag_dump_states.php8
1 files changed, 4 insertions, 4 deletions
diff --git a/usr/local/www/diag_dump_states.php b/usr/local/www/diag_dump_states.php
index fffdc2b..5ee7d13 100755
--- a/usr/local/www/diag_dump_states.php
+++ b/usr/local/www/diag_dump_states.php
@@ -31,10 +31,10 @@ require_once("guiconfig.inc");
$pgtitle = array("Diagnostics","Show States");
include("head.inc");
-$srcip = htmlentities($_GET['srcip']);
-$dstip = htmlentities($_GET['dstip']);
-$action = htmlentities($_GET['action']);
-$filter = htmlentities($_GET['filter']);
+$srcip = escapeshellarg($_GET['srcip']);
+$dstip = escapeshellarg($_GET['dstip']);
+$action = escapeshellarg($_GET['action']);
+$filter = escapeshellarg($_GET['filter']);
/* handle AJAX operations */
if($_GET['action']) {
OpenPOWER on IntegriCloud