From 700697582772ffddfd72f2a9e6d17b2230a74468 Mon Sep 17 00:00:00 2001
From: Bill Marquette <billm@pfsense.org>
Date: Tue, 22 Feb 2005 00:45:18 +0000
Subject: Don't disclose SNMP community strings

---
 usr/local/www/status.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'usr')

diff --git a/usr/local/www/status.php b/usr/local/www/status.php
index 6fa1c6c..1835f8d 100755
--- a/usr/local/www/status.php
+++ b/usr/local/www/status.php
@@ -22,9 +22,10 @@ function doCmdT($title, $command) {
 		if ($fd) {
 			while (!feof($fd)) {
 				$line = fgets($fd);
-				/* remove password tag contents */
+				/* remove sensitive contents */
 				$line = preg_replace("/<password>.*?<\\/password>/", "<password>xxxxx</password>", $line);
 				$line = preg_replace("/<pre-shared-key>.*?<\\/pre-shared-key>/", "<pre-shared-key>xxxxx</pre-shared-key>", $line);
+				$line = preg_replace("/<rocommunity>.*?<\\/rocommunity>/", "<rocommunity>xxxxx</rocommunity>", $line);
 				$line = str_replace("\t", "    ", $line);
 				echo htmlspecialchars($line,ENT_NOQUOTES);
 			}
-- 
cgit v1.1