From 225a2f0b4696c497263d0926011a0f39ab08b0f3 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Fri, 12 Nov 2010 11:03:44 -0500
Subject: Bring in XSS id fixes from m0n0wall

---
 usr/local/www/services_captiveportal_mac_edit.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'usr/local/www/services_captiveportal_mac_edit.php')

diff --git a/usr/local/www/services_captiveportal_mac_edit.php b/usr/local/www/services_captiveportal_mac_edit.php
index f0d92c3..aabf4b3 100755
--- a/usr/local/www/services_captiveportal_mac_edit.php
+++ b/usr/local/www/services_captiveportal_mac_edit.php
@@ -184,7 +184,7 @@ include("head.inc");
                   <td width="78%"> 
                     <input name="Submit" type="submit" class="formbtn" value="<?=gettext("Save"); ?>">
                     <?php if (isset($id) && $a_passthrumacs[$id]): ?>
-                    <input name="id" type="hidden" value="<?=$id;?>">
+                    <input name="id" type="hidden" value="<?=htmlspecialchars($id);?>">
                     <?php endif; ?>
 		    <?php if (isset($pconfig['username']) && $pconfig['username']): ?>
                     <input name="username" type="hidden" value="<?=htmlspecialchars($pconfig['username']);?>">
-- 
cgit v1.1