Projet

Général

Profil

« Précédent | Suivant » 

Révision 2f9951fe

Ajouté par Renato Botelho il y a presque 10 ans

Add some protection to parameters that come through _GET

Voir les différences:

usr/local/www/status_services.php
41 41 
require_once("service-utils.inc");
42 42 
require_once("shortcuts.inc");
43 43 

  		




  44
  
  
    
if (!empty($_GET['service'])) {


  		




  
  44
  
    
$service_name = '';


  		




  
  45
  
    
if (isset($_GET['service']))


  		




  
  46
  
    
	$service_name = htmlspecialchars($_GET['service']);


  		




  
  47
  
    

  		




  
  48
  
    
if (!empty($service_name)) {


  		




  45
  49
  
    
	switch ($_GET['mode']) {


  		




  46
  50
  
    
		case "restartservice":


  		




  47
  
  
    
			$savemsg = service_control_restart($_GET['service'], $_GET);


  		




  
  51
  
    
			$savemsg = service_control_restart($service_name, $_GET);


  		




  48
  52
  
    
			break;


  		




  49
  53
  
    
		case "startservice":


  		




  50
  
  
    
			$savemsg = service_control_start($_GET['service'], $_GET);


  		




  
  54
  
    
			$savemsg = service_control_start($service_name, $_GET);


  		




  51
  55
  
    
			break;


  		




  52
  56
  
    
		case "stopservice":


  		




  53
  
  
    
			$savemsg = service_control_stop($_GET['service'], $_GET);


  		




  
  57
  
    
			$savemsg = service_control_stop($service_name, $_GET);


  		




  54
  58
  
    
			break;


  		




  55
  59
  
    
	}


  		




  56
  60
  
    
	sleep(5);


  		












Formats disponibles :  Unified diff