summaryrefslogtreecommitdiffstats
path: root/usr
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2010-10-19 12:51:12 -0400
committerjim-p <jimp@pfsense.org>2010-10-19 12:51:12 -0400
commit9ff73b79e46be2022c861ef332f22b73d6dbe973 (patch)
treeaee73c12ae512f3a4ceea6962e36342c8844e43e /usr
parente988813dd2e6ab104660969c80395d1dc7877e3e (diff)
downloadpfsense-9ff73b79e46be2022c861ef332f22b73d6dbe973.zip
pfsense-9ff73b79e46be2022c861ef332f22b73d6dbe973.tar.gz
Convert fullname field on users to descr, so it gains CDATA protection.
Diffstat (limited to 'usr')
-rw-r--r--usr/local/www/system_usermanager.php8
1 files changed, 4 insertions, 4 deletions
diff --git a/usr/local/www/system_usermanager.php b/usr/local/www/system_usermanager.php
index 0527594..a80ba00 100644
--- a/usr/local/www/system_usermanager.php
+++ b/usr/local/www/system_usermanager.php
@@ -152,7 +152,7 @@ if (isAllowedPage("system_usermanager")) {
if ($_GET['act'] == "edit") {
if (isset($id) && $a_user[$id]) {
$pconfig['usernamefld'] = $a_user[$id]['name'];
- $pconfig['fullname'] = $a_user[$id]['fullname'];
+ $pconfig['descr'] = $a_user[$id]['descr'];
$pconfig['expires'] = $a_user[$id]['expires'];
$pconfig['groups'] = local_user_get_groups($a_user[$id]);
$pconfig['utype'] = $a_user[$id]['scope'];
@@ -284,7 +284,7 @@ if (isAllowedPage("system_usermanager")) {
local_user_set_password($userent, $_POST['passwordfld1']);
$userent['name'] = $_POST['usernamefld'];
- $userent['fullname'] = $_POST['fullname'];
+ $userent['descr'] = $_POST['descr'];
$userent['expires'] = $_POST['expires'];
$userent['authorizedkeys'] = base64_encode($_POST['authorizedkeys']);
$userent['ipsecpsk'] = $_POST['ipsecpsk'];
@@ -496,7 +496,7 @@ function sshkeyClicked(obj) {
<tr>
<td width="22%" valign="top" class="vncell"><?=gettext("Full name");?></td>
<td width="78%" class="vtable">
- <input name="fullname" type="text" class="formfld unknown" id="fullname" size="20" value="<?=htmlspecialchars($pconfig['fullname']);?>" <?=$ro;?>/>
+ <input name="descr" type="text" class="formfld unknown" id="descr" size="20" value="<?=htmlspecialchars($pconfig['descr']);?>" <?=$ro;?>/>
<br/>
<?=gettext("User's full name, for your own information only");?>
</td>
@@ -812,7 +812,7 @@ function sshkeyClicked(obj) {
</tr>
</table>
</td>
- <td class="listr"><?=htmlspecialchars($userent['fullname']);?>&nbsp;</td>
+ <td class="listr"><?=htmlspecialchars($userent['descr']);?>&nbsp;</td>
<td class="listr"><?php if(isset($userent['disabled'])) echo "*"; ?></td>
<td class="listbg">
<?=implode(",",local_user_get_groups($userent));?>
OpenPOWER on IntegriCloud