mirror of
https://git.FreeBSD.org/ports.git
synced 2025-01-30 10:38:37 +00:00
ab83431b95
Submitted by: Jarrod Sayers <jarrod@netleader.com.au> (private mail) Security: 3ebd4cb5-657f-11de-883a-00e0815b8da8
54 lines
1.4 KiB
C
54 lines
1.4 KiB
C
--- cgi/statuswml.c.orig 2008-05-20 02:34:38.000000000 +0930
|
|
+++ cgi/statuswml.c 2009-07-09 19:59:49.000000000 +0930
|
|
@@ -66,6 +66,8 @@
|
|
void document_header(void);
|
|
void document_footer(void);
|
|
int process_cgivars(void);
|
|
+int validate_arguments(void);
|
|
+int is_valid_hostip(char *hostip);
|
|
|
|
int display_type=DISPLAY_INDEX;
|
|
int hostgroup_style=DISPLAY_HOSTGROUP_SUMMARY;
|
|
@@ -107,6 +109,13 @@
|
|
|
|
document_header();
|
|
|
|
+ /* validate arguments in URL */
|
|
+ result=validate_arguments();
|
|
+ if(result==ERROR){
|
|
+ document_footer();
|
|
+ return ERROR;
|
|
+ }
|
|
+
|
|
/* read the CGI configuration file */
|
|
result=read_cgi_config_file(get_cgi_config_location());
|
|
if(result==ERROR){
|
|
@@ -349,6 +358,27 @@
|
|
}
|
|
|
|
|
|
+int validate_arguments(void){
|
|
+ int result=OK;
|
|
+ if((strcmp(ping_address,"")) && !is_valid_hostip(ping_address)) {
|
|
+ printf("<p>Invalid host name/ip</p>\n");
|
|
+ result=ERROR;
|
|
+ }
|
|
+ if(strcmp(traceroute_address,"") && !is_valid_hostip(traceroute_address)){
|
|
+ printf("<p>Invalid host name/ip</p>\n");
|
|
+ result=ERROR;
|
|
+ }
|
|
+ return result;
|
|
+ }
|
|
+
|
|
+int is_valid_hostip(char *hostip) {
|
|
+ char *valid_domain_chars="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-";
|
|
+ if(strcmp(hostip,"") && strlen(hostip)==strspn(hostip,valid_domain_chars) && hostip[0] != '-' && hostip[strlen(hostip)-1] != '-')
|
|
+ return TRUE;
|
|
+ return FALSE;
|
|
+ }
|
|
+
|
|
+
|
|
|
|
/* main intro screen */
|
|
void display_index(void){
|