summaryrefslogtreecommitdiffstats
path: root/usr/local/www/services_unbound_acls.php
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2015-03-05 10:00:56 -0500
committerjim-p <jimp@pfsense.org>2015-03-05 10:01:22 -0500
commit32787389519d667b94da5f0884d4bd1045d89838 (patch)
tree3132d8369e5be4f0b2bfd8fbc206af5a4c7e5e4b /usr/local/www/services_unbound_acls.php
parente52c3c88cb63624f08cce977ca1f512c28b32f3c (diff)
downloadpfsense-32787389519d667b94da5f0884d4bd1045d89838.zip
pfsense-32787389519d667b94da5f0884d4bd1045d89838.tar.gz
Do not render the services_unbound_acls page with an invalid ID.
Diffstat (limited to 'usr/local/www/services_unbound_acls.php')
-rw-r--r--usr/local/www/services_unbound_acls.php5
1 files changed, 5 insertions, 0 deletions
diff --git a/usr/local/www/services_unbound_acls.php b/usr/local/www/services_unbound_acls.php
index 936f3ee..7a1af28 100644
--- a/usr/local/www/services_unbound_acls.php
+++ b/usr/local/www/services_unbound_acls.php
@@ -46,6 +46,11 @@ if (isset($_POST['aclid'])) {
$id = $_POST['aclid'];
}
+if (!empty($id) && !is_numeric($id)) {
+ pfSenseHeader("services_unbound_acls.php");
+ exit;
+}
+
$act = $_GET['act'];
if (isset($_POST['act'])) {
$act = $_POST['act'];
OpenPOWER on IntegriCloud