From 09db10704f47f7993e877f83a73ee52a33c64f19 Mon Sep 17 00:00:00 2001
From: Bill Marquette <billm@pfsense.org>
Date: Sat, 23 Jul 2005 14:50:01 +0000
Subject: [PATCH] Don't allow user to enter descriptions longer than 63 chars

---
 usr/local/www/firewall_rules_edit.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/usr/local/www/firewall_rules_edit.php b/usr/local/www/firewall_rules_edit.php
index f61228eb77..55a2eebd83 100755
--- a/usr/local/www/firewall_rules_edit.php
+++ b/usr/local/www/firewall_rules_edit.php
@@ -282,6 +282,7 @@ if ($_POST) {
                         $filterent['log'] = true;
                 else
                         unset($filterent['log']);
+		/* XXX: enforce 63 char max length server side, client-side is already done */
 		$filterent['descr'] = $_POST['descr'];
 
 		if ($_POST['gateway'] != "") {
@@ -723,7 +724,7 @@ Hint: the difference between block and reject is that with reject, a packet (TCP
                 <tr>
                   <td width="22%" valign="top" class="vncell">Description</td>
                   <td width="78%" class="vtable">
-                    <input name="descr" type="text" class="formfld" id="descr" size="40" value="<?=htmlspecialchars($pconfig['descr']);?>">
+                    <input name="descr" type="text" class="formfld" id="descr" size="63" maxlength="63" value="<?=htmlspecialchars($pconfig['descr']);?>">
                     <br> <span class="vexpl">You may enter a description here
                     for your reference (not parsed).</span></td>
                 </tr>