diff options
| author | jim-p <jimp@pfsense.org> | 2015-06-16 10:53:04 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2015-06-16 10:53:04 -0400 |
| commit | d213c48520c6d694e660b208340e4e632e153585 (patch) | |
| tree | 5475b31f9415204e5c883a1d01a1459b5d309f8c /usr/local/www/services_ntpd.php | |
| parent | 621baeb604d1125e10222a70ba9a7efa85eff22b (diff) | |
| download | pfsense-d213c48520c6d694e660b208340e4e632e153585.zip pfsense-d213c48520c6d694e660b208340e4e632e153585.tar.gz | |
Fix some low-hanging potential security issues.
Diffstat (limited to 'usr/local/www/services_ntpd.php')
| -rw-r--r-- | usr/local/www/services_ntpd.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/services_ntpd.php b/usr/local/www/services_ntpd.php index 88d3f20..25a380f 100644 --- a/usr/local/www/services_ntpd.php +++ b/usr/local/www/services_ntpd.php @@ -295,7 +295,7 @@ include("head.inc"); } echo ">\n"; - echo "<input name=\"server{$i}\" class=\"formfld unknown\" id=\"server{$i}\" size=\"30\" value=\"{$timeservers[$i]}\" type=\"text\" /> "; + echo "<input name=\"server{$i}\" class=\"formfld unknown\" id=\"server{$i}\" size=\"30\" value=\"" . htmlspecialchars($timeservers[$i]) . "\" type=\"text\" /> "; echo "\n<input name=\"servprefer{$i}\" class=\"formcheckbox\" id=\"servprefer{$i}\" onclick=\"CheckOffOther('servprefer{$i}', 'servselect{$i}')\" type=\"checkbox\""; if (isset($config['ntpd']['prefer']) && isset($timeservers[$i]) && substr_count($config['ntpd']['prefer'], $timeservers[$i])) echo " checked=\"checked\""; echo " /> prefer "; |
