From 7a7ec82a0cab49de9a8e8b2deffa24b0a31ec8b9 Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Thu, 2 Apr 2015 18:05:16 +0200
Subject: [PATCH] system: sanitise theme handling here

---
 src/www/system.php | 22 +++++++++-------------
 1 file changed, 9 insertions(+), 13 deletions(-)

diff --git a/src/www/system.php b/src/www/system.php
index 4723059a6..3feccd56f 100644
--- a/src/www/system.php
+++ b/src/www/system.php
@@ -477,20 +477,16 @@ include("head.inc");
 							<td width="78%" class="vtable">
 								<select name="theme" class="selectpicker" data-style="btn-default" data-width="auto">
 									<?php
-										$files = return_dir_as_array("/usr/local/www/themes/");
-										foreach($files as $f):
-											if ((substr($f, 0, 1) == "_") && !isset($config['system']['developer']))
-												continue;
-											if ($f == "CVS")
-												continue;
-											$curtheme = "opnsense";
-											if ($config['theme'])
-												$curtheme = $config['theme'];
-											$selected = "";
-											if($f == $curtheme)
-												$selected = " selected=\"selected\"";
+										$files = return_dir_as_array('/usr/local/www/themes/');
+										$curtheme = get_current_theme();
+
+										foreach ($files as $file):
+											$selected = '';
+											if ($file == $curtheme) {
+												$selected = ' selected="selected"';
+											}
 									?>
-									<option <?=$selected;?>><?=$f;?></option>
+									<option <?=$selected;?>><?=$file;?></option>
 									<?php endforeach; ?>
 								</select>
 								<strong>