From 2f306bdbc65d4f2f7cd1a028cd835e9766d7828a Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Tue, 3 Jun 2008 22:47:58 +0000
Subject: [PATCH] Escape shell argument correctly.

---
 usr/local/www/interfaces_wlan_scan.php | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/usr/local/www/interfaces_wlan_scan.php b/usr/local/www/interfaces_wlan_scan.php
index cecda93bc0..e5eb7912b6 100755
--- a/usr/local/www/interfaces_wlan_scan.php
+++ b/usr/local/www/interfaces_wlan_scan.php
@@ -43,8 +43,11 @@ include("head.inc");
 <?php include("fbegin.inc"); ?>
 <p class="pgtitle"><?=$pgtitle?></p>
 
-echo "Scanning nodes... One moment please...";
-$scan_nodes = `/sbin/ifconfig {$_GET['interface']} scan`;
+$interface = escapeshellarg($_GET['interface']);
+
+echo gettext("Scanning nodes... One moment please...");
+$scan_nodes = `/sbin/ifconfig {$interface} scan`;
+
 echo "<P>Available nodes:<PRE>";
 echo $scan_nodes;
 echo "</PRE>";