mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Encode the if parameter before using it in redirects, too.

Browse Source 
Conflicts:

	usr/local/www/firewall_rules.php
This commit is contained in:
jim-p 2012-10-31 14:06:34 -04:00
parent abe430cc38
commit e653b6e118
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
usr/local/www/firewall_rules.php
View File

@ -212,7 +212,7 @@ if ($_GET['act'] == "del") {
unset($a_filter[$_GET['id']]);
if (write_config())
mark_subsystem_dirty('filter');
header("Location: firewall_rules.php?if={$if}");
header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
exit;
}
}
@ -230,7 +230,7 @@ if (isset($_POST['del_x'])) {
}
if (write_config())
mark_subsystem_dirty('filter');
header("Location: firewall_rules.php?if={$if}");
header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
exit;
}
} else if ($_GET['act'] == "toggle") {
@ -241,7 +241,7 @@ if (isset($_POST['del_x'])) {
$a_filter[$_GET['id']]['disabled'] = true;
if (write_config())
mark_subsystem_dirty('filter');
header("Location: firewall_rules.php?if={$if}");
header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
exit;
}
} else {
@ -285,7 +285,7 @@ if (isset($_POST['del_x'])) {
$a_filter = $a_filter_new;
if (write_config())
mark_subsystem_dirty('filter');
header("Location: firewall_rules.php?if={$if}");
header("Location: firewall_rules.php?if=" . htmlspecialchars($if));
exit;
}
}