summaryrefslogtreecommitdiffstats
path: root/usr
diff options
context:
space:
mode:
Diffstat (limited to 'usr')
-rw-r--r--usr/local/captiveportal/index.php4
1 files changed, 3 insertions, 1 deletions
diff --git a/usr/local/captiveportal/index.php b/usr/local/captiveportal/index.php
index a8b3842..eaaf920 100644
--- a/usr/local/captiveportal/index.php
+++ b/usr/local/captiveportal/index.php
@@ -137,7 +137,9 @@ setTimeout('window.close();',5000) ;
</html>
EOD;
- captiveportal_disconnect_client($_POST['logout_id']);
+
+ $safe_logout_id = SQLite3::escapeString($_POST['logout_id']);
+ captiveportal_disconnect_client($safe_logout_id);
} else if ($macfilter && $clientmac && captiveportal_blocked_mac($clientmac)) {
captiveportal_logportalauth($clientmac,$clientmac,$clientip,"Blocked MAC address");
OpenPOWER on IntegriCloud