summaryrefslogtreecommitdiffstats
path: root/usr/local/www/interfaces.php
diff options
context:
space:
mode:
authorRenato Botelho <garga@FreeBSD.org>2014-02-04 12:33:29 -0200
committerRenato Botelho <garga@FreeBSD.org>2014-02-04 12:34:42 -0200
commitd31ca3363dcb7b243f71118744123a5ba71665cb (patch)
treed9478b15b7a4316a10b7a9b5d4a415c272285a1c /usr/local/www/interfaces.php
parent39ed87e54d14af2603cc66e65ac5e13a9c9843b1 (diff)
downloadpfsense-d31ca3363dcb7b243f71118744123a5ba71665cb.zip
pfsense-d31ca3363dcb7b243f71118744123a5ba71665cb.tar.gz
Add escapeshellarg() calls on exec parameters. While I'm here, replace some exec() calls by php functions like symlink, copy, unlink, mkdir
Diffstat (limited to 'usr/local/www/interfaces.php')
-rwxr-xr-xusr/local/www/interfaces.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/interfaces.php b/usr/local/www/interfaces.php
index bfea79d..8927d5b 100755
--- a/usr/local/www/interfaces.php
+++ b/usr/local/www/interfaces.php
@@ -1314,7 +1314,7 @@ function check_wireless_mode() {
if (!interface_wireless_clone("{$wlanif}_", $wancfg)) {
$input_errors[] = sprintf(gettext("Unable to change mode to %s. You may already have the maximum number of wireless clones supported in this mode."), $wlan_modes[$wancfg['wireless']['mode']]);
} else {
- mwexec("/sbin/ifconfig {$wlanif}_ destroy");
+ mwexec("/sbin/ifconfig " . escapeshellarg($wlanif) . "_ destroy");
}
$wancfg['wireless']['mode'] = $old_wireless_mode;
}
OpenPOWER on IntegriCloud