diff options
| author | jim-p <jimp@pfsense.org> | 2010-11-04 13:18:29 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2010-11-04 13:18:29 -0400 |
| commit | 9882cbef8e990c82498152d6831b91b27cfd0240 (patch) | |
| tree | c6b86534db34407a4dd944562ff44344f0ad6c39 /usr | |
| parent | 3339c56f9558cf564ce7a2ebbeacaf7adc8482c4 (diff) | |
| download | pfsense-9882cbef8e990c82498152d6831b91b27cfd0240.zip pfsense-9882cbef8e990c82498152d6831b91b27cfd0240.tar.gz | |
Use addslashes() here to prevent unescaped quotes from causing PHP errors. Fixes advanced/custom options in OpenVPN wizard.
Diffstat (limited to 'usr')
| -rwxr-xr-x | usr/local/www/wizard.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/wizard.php b/usr/local/www/wizard.php index 9dc4d80..965a2aa 100755 --- a/usr/local/www/wizard.php +++ b/usr/local/www/wizard.php @@ -155,7 +155,7 @@ function update_config_field($field, $updatetext, $unset, $arraynum, $field_type $text = "unset(\$config" . $field_conv . ");"; eval($text); } - $text = "\$config" . $field_conv . " = \"" . $updatetext . "\";"; + $text = "\$config" . $field_conv . " = \"" . addslashes($updatetext) . "\";"; eval($text); } |
