Escape IPv6 when passed to ndp delete command

This commit is contained in:
Sergio Carlos Morales Angeles 2017-04-20 09:40:24 -05:00
parent 13105d9c79
commit 1d92faa34f

View File

@ -40,7 +40,7 @@ require_once("guiconfig.inc");
if (isset($_POST['deleteentry'])) {
$ip = $_POST['deleteentry'];
if (is_ipaddrv6($ip)) {
$commandReturnValue = mwexec(NDP_BINARY_PATH . " -d " . $ip, true);
$commandReturnValue = mwexec(NDP_BINARY_PATH . " -d " . escapeshellarg($ip), true);
$deleteSucceededFlag = ($commandReturnValue == 0);
} else {
$deleteSucceededFlag = false;