diff options
author | jim-p <jimp@pfsense.org> | 2015-07-01 11:06:25 -0400 |
---|---|---|
committer | jim-p <jimp@pfsense.org> | 2015-07-01 11:06:25 -0400 |
commit | ae142a104910ac810102abb69e24adf7b8811784 (patch) | |
tree | 533a904b86ddff5d6b226d07fd9debe9d9357181 /usr/local/www | |
parent | 342f509028bc675c81172fb89275fd60ec761399 (diff) | |
download | pfsense-ae142a104910ac810102abb69e24adf7b8811784.zip pfsense-ae142a104910ac810102abb69e24adf7b8811784.tar.gz |
Encode ca/cert info in openvpn_wizard.inc
Diffstat (limited to 'usr/local/www')
-rw-r--r-- | usr/local/www/wizards/openvpn_wizard.inc | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/usr/local/www/wizards/openvpn_wizard.inc b/usr/local/www/wizards/openvpn_wizard.inc index 4603aa7..ee530a2 100644 --- a/usr/local/www/wizards/openvpn_wizard.inc +++ b/usr/local/www/wizards/openvpn_wizard.inc @@ -198,6 +198,10 @@ function step7_submitphpaction() { } } + if (preg_match("/[\?\>\<\&\/\\\"\']/", $_POST['descr'])) { + $input_errors[] = "The field 'Descriptive Name' contains invalid characters."; + } + if (empty($_POST['descr']) || empty($_POST['keylength']) || empty($_POST['lifetime']) || empty($_POST['country']) || empty($_POST['state']) || empty($_POST['city']) || empty($_POST['organization']) || empty($_POST['email'])) { @@ -297,6 +301,10 @@ function step9_submitphpaction() { } } + if (preg_match("/[\?\>\<\&\/\\\"\']/", $_POST['descr'])) { + $input_errors[] = "The field 'Descriptive Name' contains invalid characters."; + } + if (empty($_POST['descr']) || empty($_POST['keylength']) || empty($_POST['lifetime']) || empty($_POST['country']) || empty($_POST['state']) || empty($_POST['city']) || empty($_POST['organization']) || empty($_POST['email'])) { |