michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-03-11 05:12:03 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Fix runlevel change input validation and escaping (#2)

Browse Source
This commit is contained in:
Ilia Ross
2026-03-10 17:29:16 +02:00
parent b3ec013fc9
commit 2c211e557e
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
init/change_rl.cgi
View File

@@ -5,10 +5,12 @@
require './init-lib.pl';
&ReadParse();
$access{'bootup'} == 1 || &error($text{'change_ecannot'});
my %ok_levels = map { $_, 1 } (&list_runlevels(), "S", "s");
$ok_levels{$in{'level'}} || &error($text{'change_ecannot'});
&ui_print_header(undef, $text{'change_title'}, "");
$cmd = "telinit '$in{'level'}'";
$cmd = "telinit ".quotemeta($in{'level'});
print "<p>",&text('change_cmd', $in{'level'}, "<tt>$cmd</tt>"),"<p>\n";
&system_logged("$cmd </dev/null >/dev/null 2>&1 &");
&webmin_log("telinit", $in{'level'});