(firewall/npt) add ip/alias input validation

(cherry picked from commit e584db96)

(firewall/npt) add ip/alias input validation
(cherry picked from commit e584db96)
0b0e64e1 · Ad Schellevis · Franco Fichtner · 6b396b41 · 0b0e64e1
Commit 0b0e64e1 authored Jul 04, 2016 by Ad Schellevis Committed by Franco Fichtner Jul 06, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 7 additions and 0 deletions

firewall_nat_npt_edit.php src/www/firewall_nat_npt_edit.php +7 -0

No files found.
--- a/src/www/firewall_nat_npt_edit.php
+++ b/src/www/firewall_nat_npt_edit.php
@@ -129,6 +129,13 @@ if ($_SERVER['REQUEST_METHOD'] === 'GET') {

    do_input_validation($pconfig, $reqdfields, $reqdfieldsn, $input_errors);

+    if (!is_ipaddroralias($pconfig['src'])) {
+        $input_errors[] = sprintf(gettext("%s is not a valid source IP address or alias."), $pconfig['src']);
+    }
+    if (!is_ipaddroralias($pconfig['dst'])) {
+        $input_errors[] = sprintf(gettext("%s is not a valid destination IP address or alias."), $pconfig['dst']);
+    }
+
    if (count($input_errors) == 0) {
      $natent = array();