lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-15 17:14:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

wizard: do not interpret passed values for #1359

Browse Source
This commit is contained in:
Franco Fichtner 2017-01-28 23:37:41 +01:00
parent 67e3e70750
commit 593d7525ae
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/www/wizard.php
View File

@ -197,7 +197,7 @@ function update_config_field($field, $updatetext, $unset, $arraynum, $field_type
if($field_type == "interfaces_selection") {
$var = "\$config{$field_conv}";
$text = "if (isset({$var})) unset({$var});";
$text .= "\$config" . $field_conv . " = \"" . $updatetext . "\";";
$text .= "\$config" . $field_conv . " = '" . addslashes($updatetext) . "';";
eval($text);
return;
}
@ -206,7 +206,7 @@ function update_config_field($field, $updatetext, $unset, $arraynum, $field_type
$text = "unset(\$config" . $field_conv . ");";
eval($text);
}
$text = "\$config" . $field_conv . " = \"" . addslashes($updatetext) . "\";";
$text = "\$config" . $field_conv . " = '" . addslashes($updatetext) . "';";
eval($text);
}