summaryrefslogtreecommitdiffstats
path: root/usr
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2008-06-03 22:47:51 +0000
committerScott Ullrich <sullrich@pfsense.org>2008-06-03 22:47:51 +0000
commit3ec5e5f9b3b803eabf95f9fd0ddfe588488a5411 (patch)
tree35eb866234e3e67e60b1ac1bdc4a9cde5681d8f5 /usr
parentde40ddc980348785ed400def7898e233a81caec1 (diff)
downloadpfsense-3ec5e5f9b3b803eabf95f9fd0ddfe588488a5411.zip
pfsense-3ec5e5f9b3b803eabf95f9fd0ddfe588488a5411.tar.gz
Escape shell argument correctly.
Diffstat (limited to 'usr')
-rwxr-xr-xusr/local/www/interfaces_wlan_scan.php7
1 files changed, 5 insertions, 2 deletions
diff --git a/usr/local/www/interfaces_wlan_scan.php b/usr/local/www/interfaces_wlan_scan.php
index 7e296d2..7f7b56c 100755
--- a/usr/local/www/interfaces_wlan_scan.php
+++ b/usr/local/www/interfaces_wlan_scan.php
@@ -42,8 +42,11 @@ include("head.inc");
<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
<?php include("fbegin.inc"); ?>
-echo "Scanning nodes... One moment please...";
-$scan_nodes = `/sbin/ifconfig {$_GET['interface']} scan`;
+$interface = escapeshellarg($_GET['interface']);
+
+echo gettext("Scanning nodes... One moment please...");
+$scan_nodes = `/sbin/ifconfig {$interface} scan`;
+
echo "<P>Available nodes:<PRE>";
echo $scan_nodes;
echo "</PRE>";
OpenPOWER on IntegriCloud