summaryrefslogtreecommitdiffstats
path: root/usr/local/www
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2015-07-01 11:06:25 -0400
committerjim-p <jimp@pfsense.org>2015-07-01 11:06:25 -0400
commitae142a104910ac810102abb69e24adf7b8811784 (patch)
tree533a904b86ddff5d6b226d07fd9debe9d9357181 /usr/local/www
parent342f509028bc675c81172fb89275fd60ec761399 (diff)
downloadpfsense-ae142a104910ac810102abb69e24adf7b8811784.zip
pfsense-ae142a104910ac810102abb69e24adf7b8811784.tar.gz
Encode ca/cert info in openvpn_wizard.inc
Diffstat (limited to 'usr/local/www')
-rw-r--r--usr/local/www/wizards/openvpn_wizard.inc8
1 files changed, 8 insertions, 0 deletions
diff --git a/usr/local/www/wizards/openvpn_wizard.inc b/usr/local/www/wizards/openvpn_wizard.inc
index 4603aa7..ee530a2 100644
--- a/usr/local/www/wizards/openvpn_wizard.inc
+++ b/usr/local/www/wizards/openvpn_wizard.inc
@@ -198,6 +198,10 @@ function step7_submitphpaction() {
}
}
+ if (preg_match("/[\?\>\<\&\/\\\"\']/", $_POST['descr'])) {
+ $input_errors[] = "The field 'Descriptive Name' contains invalid characters.";
+ }
+
if (empty($_POST['descr']) || empty($_POST['keylength']) || empty($_POST['lifetime']) ||
empty($_POST['country']) || empty($_POST['state']) || empty($_POST['city']) ||
empty($_POST['organization']) || empty($_POST['email'])) {
@@ -297,6 +301,10 @@ function step9_submitphpaction() {
}
}
+ if (preg_match("/[\?\>\<\&\/\\\"\']/", $_POST['descr'])) {
+ $input_errors[] = "The field 'Descriptive Name' contains invalid characters.";
+ }
+
if (empty($_POST['descr']) || empty($_POST['keylength']) || empty($_POST['lifetime']) ||
empty($_POST['country']) || empty($_POST['state']) || empty($_POST['city']) ||
empty($_POST['organization']) || empty($_POST['email'])) {
OpenPOWER on IntegriCloud