Validate starttime and stoptime format

1 files changed, 8 insertions, 0 deletions

diff --git a/usr/local/www/firewall_schedule_edit.php b/usr/local/www/firewall_schedule_edit.php
index 4b361b1..e1901e3 100644
--- a/usr/local/www/firewall_schedule_edit.php
+++ b/usr/local/www/firewall_schedule_edit.php
@@ -116,6 +116,14 @@ if ($_POST) {
 	$timerangeFound = false;
 	for ($x=0; $x<99; $x++){
 		if($_POST['schedule' . $x]) {
+			if (!preg_match('/^[0-9]+:[0-9]+$/', $_POST['starttime' . $x])) {
+				$input_errors[] = sprintf(gettext("Invalid start time - '%s'"), $_POST['starttime' . $x]);
+				continue;
+			}
+			if (!preg_match('/^[0-9]+:[0-9]+$/', $_POST['stoptime' . $x])) {
+				$input_errors[] = sprintf(gettext("Invalid start time - '%s'"), $_POST['stoptime' . $x]);
+				continue;
+			}
 			$timerangeFound = true;
 			$timeparts = array();
 			$firstprint = false;