mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

add input validation for NAS-Identifier

Browse Source
This commit is contained in:
Michael Newton 2013-02-12 11:11:56 -08:00
parent f9dc100c3c
commit 89b1c40c41
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
usr/local/www/services_captiveportal.php
View File

@ -224,6 +224,9 @@ if ($_POST) {
if ($_POST['maxproc'] && (!is_numeric($_POST['maxproc']) || ($_POST['maxproc'] < 4) || ($_POST['maxproc'] > 100))) {
$input_errors[] = gettext("The maximum number of concurrent connections per client IP address may not be larger than the global maximum.");
}
if (trim($_POST['radiusnasid']) !== "" && !preg_match("/^[\x21-\x7e]{3,253}$/i", trim($_POST['radiusnasid']))) {
$input_errors[] = gettext("The NAS-Identifier must be 3-253 characters long and should only contain ASCII characters.");
}
if (!$input_errors) {
$newcp =& $a_cp[$cpzone];
@ -827,8 +830,8 @@ function enable_change(enable_change) {
<tr>
<td class="vncell" valign="top"><?=gettext("NAS Identifier"); ?></td>
<td class="vtable"><input name="radiusnasid" type="text" class="formfld unknown" id="radiusnasid" value="<?=htmlspecialchars($pconfig['radiusnasid']);?>"/><br/>
<?=gettext("Specify a NAS identifier to override the default value") . " " . php_uname("n"); ?></td>
<td class="vtable"><input name="radiusnasid" type="text" maxlength="253" class="formfld unknown" id="radiusnasid" value="<?=htmlspecialchars($pconfig['radiusnasid']);?>"/><br/>
<?=gettext("Specify a NAS identifier to override the default value") . " (" . php_uname("n") . ")"; ?></td>
</tr>
<tr>
<td class="vncell" valign="top"><?=gettext("MAC address format"); ?></td>