Skip to content

O
OpnSense
Commit 593d7525 authored by Franco Fichtner's avatar Franco Fichtner
Browse files
Options

wizard: do not interpret passed values for #1359

parent 67e3e707
Show whitespace changes
Inline Side-by-side
Showing with 2 additions and 2 deletions
src/www/wizard.php
View file @ 593d7525
...@@ -197,7 +197,7 @@ function update_config_field($field, $updatetext, $unset, $arraynum, $field_type ...@@ -197,7 +197,7 @@ function update_config_field($field, $updatetext, $unset, $arraynum, $field_type
if($field_type == "interfaces_selection") { if($field_type == "interfaces_selection") {
$var = "\$config{$field_conv}"; $var = "\$config{$field_conv}";
$text = "if (isset({$var})) unset({$var});"; $text = "if (isset({$var})) unset({$var});";
$text .= "\$config" . $field_conv . " = \"" . $updatetext . "\";"; $text .= "\$config" . $field_conv . " = '" . addslashes($updatetext) . "';";
eval($text); eval($text);
return; return;
} }
...@@ -206,7 +206,7 @@ function update_config_field($field, $updatetext, $unset, $arraynum, $field_type ...@@ -206,7 +206,7 @@ function update_config_field($field, $updatetext, $unset, $arraynum, $field_type
$text = "unset(\$config" . $field_conv . ");"; $text = "unset(\$config" . $field_conv . ");";
eval($text); eval($text);
} }
$text = "\$config" . $field_conv . " = \"" . addslashes($updatetext) . "\";"; $text = "\$config" . $field_conv . " = '" . addslashes($updatetext) . "';";
eval($text); eval($text);
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment

Technounit-GROUP 2023