diff options
author | jim-p <jimp@pfsense.org> | 2015-03-05 10:00:56 -0500 |
---|---|---|
committer | jim-p <jimp@pfsense.org> | 2015-03-05 10:01:22 -0500 |
commit | 32787389519d667b94da5f0884d4bd1045d89838 (patch) | |
tree | 3132d8369e5be4f0b2bfd8fbc206af5a4c7e5e4b /usr/local/www/services_unbound_acls.php | |
parent | e52c3c88cb63624f08cce977ca1f512c28b32f3c (diff) | |
download | pfsense-32787389519d667b94da5f0884d4bd1045d89838.zip pfsense-32787389519d667b94da5f0884d4bd1045d89838.tar.gz |
Do not render the services_unbound_acls page with an invalid ID.
Diffstat (limited to 'usr/local/www/services_unbound_acls.php')
-rw-r--r-- | usr/local/www/services_unbound_acls.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/usr/local/www/services_unbound_acls.php b/usr/local/www/services_unbound_acls.php index 936f3ee..7a1af28 100644 --- a/usr/local/www/services_unbound_acls.php +++ b/usr/local/www/services_unbound_acls.php @@ -46,6 +46,11 @@ if (isset($_POST['aclid'])) { $id = $_POST['aclid']; } +if (!empty($id) && !is_numeric($id)) { + pfSenseHeader("services_unbound_acls.php"); + exit; +} + $act = $_GET['act']; if (isset($_POST['act'])) { $act = $_POST['act']; |