webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 03:33:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

proxylog.dat: Escape usernames.

Browse Source 
Bug #10406.
This commit is contained in:
Michael Tremer
2013-08-20 11:06:36 +02:00
parent 8b33e596c4
commit 5ba9e6606e
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
html/cgi-bin/logs.cgi/proxylog.dat
View File

@@ -90,7 +90,7 @@ if ($ENV{'QUERY_STRING'} && $cgiparams{'ACTION'} ne $Lang::tr{'update'})
$cgiparams{'MONTH'} = $temp[1]; $cgiparams{'MONTH'} = $temp[1];
$cgiparams{'DAY'} = $temp[2]; $cgiparams{'DAY'} = $temp[2];
$cgiparams{'SOURCE_IP'} = $temp[3]; $cgiparams{'SOURCE_IP'} = $temp[3];
$cgiparams{'USERNAME'} = $temp[4]; $cgiparams{'USERNAME'} = &Header::escape($temp[4]);
} }
if (!($cgiparams{'MONTH'} =~ /^(0|1|2|3|4|5|6|7|8|9|10|11)$/) || if (!($cgiparams{'MONTH'} =~ /^(0|1|2|3|4|5|6|7|8|9|10|11)$/) ||
@@ -383,6 +383,7 @@ print <<END
END END
; ;
foreach my $so (sort keys %users) { foreach my $so (sort keys %users) {
$so = &Header::escape($so);
print "<option value='$so' $selected{'USERNAME'}{$so}>$so</option>\n"; } print "<option value='$so' $selected{'USERNAME'}{$so}>$so</option>\n"; }
print <<END print <<END
</select> </select>