michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-02-03 14:13:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

MM-5521 escape inputs for some error messages

Browse Source
This commit is contained in:
Mike Steinmetz
2020-04-23 15:19:44 +02:00
parent 41e5ae2a46
commit edb9a43a89
23 changed files with 99 additions and 99 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
net/cygwin-lib.pl
View File

@@ -422,7 +422,7 @@ sub parse_routing
if ($gateway != $_->{'gateway'} || if ($gateway != $_->{'gateway'} ||
$gwmetric != $_->{'gwmetric'}) { $gwmetric != $_->{'gwmetric'}) {
&check_ipaddress($gateway) || &check_ipaddress($gateway) ||
&error(&text('routes_egateway', $gateway)); &error(&text('routes_egateway', &html_escape($gateway)));
my $cmd = "netsh interface ip set address name = \"" . my $cmd = "netsh interface ip set address name = \"" .
$_->{'name'} . "\" gateway = $gateway " . $_->{'name'} . "\" gateway = $gateway " .
"gwmetric = $gwmetric"; "gwmetric = $gwmetric";

20
net/debian-linux-lib.pl
View File

@@ -689,7 +689,7 @@ sub parse_routing
local ($dev, $gw); local ($dev, $gw);
if (!$in{'gateway_def'}) { if (!$in{'gateway_def'}) {
&check_ipaddress($in{'gateway'}) || &check_ipaddress($in{'gateway'}) ||
&error(&text('routes_egateway', $in{'gateway'})); &error(&text('routes_egateway', &html_escape($in{'gateway'})));
$gw = $in{'gateway'}; $gw = $in{'gateway'};
$dev = $in{'gatewaydev'}; $dev = $in{'gatewaydev'};
} }
@@ -702,7 +702,7 @@ if (@ifaces6) {
local ($dev6, $gw6); local ($dev6, $gw6);
if (!$in{'gateway6_def'}) { if (!$in{'gateway6_def'}) {
&check_ip6address($in{'gateway6'}) || &check_ip6address($in{'gateway6'}) ||
&error(&text('routes_egateway6', $in{'gateway6'})); &error(&text('routes_egateway6', &html_escape($in{'gateway6'})));
$gw6 = $in{'gateway6'}; $gw6 = $in{'gateway6'};
$dev6 = $in{'gatewaydev6'}; $dev6 = $in{'gatewaydev6'};
} }
@@ -718,11 +718,11 @@ for($i=0; defined($dev = $in{"dev_$i"}); $i++) {
local $net = $in{"net_$i"}; local $net = $in{"net_$i"};
local $netmask = $in{"netmask_$i"}; local $netmask = $in{"netmask_$i"};
local $gw = $in{"gw_$i"}; local $gw = $in{"gw_$i"};
$dev =~ /^\S+$/ || &error(&text('routes_edevice', $dev)); $dev =~ /^\S+$/ || &error(&text('routes_edevice', &html_escape($dev)));
&to_ipaddress($net) || &error(&text('routes_enet', $net)); &to_ipaddress($net) || &error(&text('routes_enet', &html_escape($net)));
&check_ipaddress_any($netmask) || &check_ipaddress_any($netmask) ||
&error(&text('routes_emask', $netmask)); &error(&text('routes_emask', &html_escape($netmask)));
&to_ipaddress($gw) || &error(&text('routes_egateway', $gw)); &to_ipaddress($gw) || &error(&text('routes_egateway', &html_escape($gw)));
local $prefix = &mask_to_prefix($netmask); local $prefix = &mask_to_prefix($netmask);
push(@{$st{$dev}}, [ "up", "ip route add $net/$prefix via $gw" ]); push(@{$st{$dev}}, [ "up", "ip route add $net/$prefix via $gw" ]);
} }
@@ -731,12 +731,12 @@ for($i=0; defined($dev = $in{"ldev_$i"}); $i++) {
local $net = $in{"lnet_$i"}; local $net = $in{"lnet_$i"};
local $netmask = $in{"lnetmask_$i"}; local $netmask = $in{"lnetmask_$i"};
next if (!$dev && !$net); next if (!$dev && !$net);
$dev =~ /^\S+$/ || &error(&text('routes_edevice', $dev)); $dev =~ /^\S+$/ || &error(&text('routes_edevice', &html_escape($dev)));
&to_ipaddress($net) || &to_ipaddress($net) ||
$net =~ /^(\S+)\/(\d+)$/ && &to_ipaddress("$1") || $net =~ /^(\S+)\/(\d+)$/ && &to_ipaddress("$1") ||
&error(&text('routes_enet', $net)); &error(&text('routes_enet', &html_escape($net)));
&check_ipaddress_any($netmask) || &check_ipaddress_any($netmask) ||
&error(&text('routes_emask', $netmask)); &error(&text('routes_emask', &html_escape($netmask)));
local $prefix = &mask_to_prefix($netmask); local $prefix = &mask_to_prefix($netmask);
push(@{$hr{$dev}}, [ "up", "ip route add $net/$prefix dev $dev" ]); push(@{$hr{$dev}}, [ "up", "ip route add $net/$prefix dev $dev" ]);
} }
@@ -841,7 +841,7 @@ while (defined $line) {
push(@ret, [$name, $addrfam, $method, \@iface_options]); push(@ret, [$name, $addrfam, $method, \@iface_options]);
} }
else { else {
error("Error reading file $pathname: unexpected line '$line'"); error("Error reading file $network_interfaces_config: unexpected line '$line'");
} }
} }
close(CFGFILE); close(CFGFILE);

4
net/freebsd-lib.pl
View File

@@ -614,11 +614,11 @@ sub parse_routing
{ {
&lock_file("/etc/rc.conf"); &lock_file("/etc/rc.conf");
$in{'defr_def'} || &check_ipaddress($in{'defr'}) || $in{'defr_def'} || &check_ipaddress($in{'defr'}) ||
&error(&text('routes_edefault', $in{'defr'})); &error(&text('routes_edefault', &html_escape($in{'defr'})));
&save_rc_conf('defaultrouter', $in{'defr_def'} ? 'NO' : $in{'defr'}); &save_rc_conf('defaultrouter', $in{'defr_def'} ? 'NO' : $in{'defr'});
if (&supports_address6()) { if (&supports_address6()) {
$in{'defr6_def'} || &check_ip6address($in{'defr6'}) || $in{'defr6_def'} || &check_ip6address($in{'defr6'}) ||
&error(&text('routes_edefault6', $in{'defr6'})); &error(&text('routes_edefault6', &html_escape($in{'defr6'})));
&save_rc_conf('ipv6_defaultrouter', &save_rc_conf('ipv6_defaultrouter',
$in{'defr6_def'} ? 'NO' : $in{'defr6'}); $in{'defr6_def'} ? 'NO' : $in{'defr6'});
} }

2
net/gentoo-linux-lib.pl
View File

@@ -303,7 +303,7 @@ if ($in{'route_def'}) {
} }
else { else {
&check_ipaddress($in{'gw'}) || &check_ipaddress($in{'gw'}) ||
&error(&text('routes_edefault', $in{'gw'})); &error(&text('routes_edefault', &html_escape($in{'gw'})));
&set_default_gateway($in{'gw'}, $in{'dev'}); &set_default_gateway($in{'gw'}, $in{'dev'});
} }
} }

2
net/macos-lib.pl
View File

@@ -422,7 +422,7 @@ elsif ($in{'router_mode'} == 1) {
} }
else { else {
$r = $in{'router'}; $r = $in{'router'};
&check_ipaddress($r) || &error(&text('routes_edefault', $r)); &check_ipaddress($r) || &error(&text('routes_edefault', &html_escape($r)));
} }
&lock_file($hostconfig_file); &lock_file($hostconfig_file);
&set_hostconfig("ROUTER", $r); &set_hostconfig("ROUTER", $r);

4
net/netplan-lib.pl
View File

@@ -444,7 +444,7 @@ sub parse_routing
my ($dev, $gw); my ($dev, $gw);
if (!$in{'gateway_def'}) { if (!$in{'gateway_def'}) {
&check_ipaddress($in{'gateway'}) || &check_ipaddress($in{'gateway'}) ||
&error(&text('routes_egateway', $in{'gateway'})); &error(&text('routes_egateway', &html_escape($in{'gateway'})));
$gw = $in{'gateway'}; $gw = $in{'gateway'};
$dev = $in{'gatewaydev'}; $dev = $in{'gatewaydev'};
} }
@@ -454,7 +454,7 @@ if (!$in{'gateway_def'}) {
my ($dev6, $gw6); my ($dev6, $gw6);
if (!$in{'gateway6_def'}) { if (!$in{'gateway6_def'}) {
&check_ip6address($in{'gateway6'}) || &check_ip6address($in{'gateway6'}) ||
&error(&text('routes_egateway6', $in{'gateway6'})); &error(&text('routes_egateway6', &html_escape($in{'gateway6'})));
$gw6 = $in{'gateway6'}; $gw6 = $in{'gateway6'};
$dev6 = $in{'gatewaydev6'}; $dev6 = $in{'gatewaydev6'};
} }

4
net/open-linux-lib.pl
View File

@@ -195,9 +195,9 @@ local %ifcs = map { $_->{'fullname'}, 1 } &all_interfaces();
if (!$in{'gateway_def'}) { if (!$in{'gateway_def'}) {
&to_ipaddress($in{'gateway'}) || &to_ipaddress($in{'gateway'}) ||
&error(&text('routes_edefault', $in{'gateway'})); &error(&text('routes_edefault', &html_escape($in{'gateway'})));
$ifcs{$in{'gatewaydev'}} || $ifcs{$in{'gatewaydev'}} ||
&error(&text('routes_edevice', $in{'gatewaydev'})); &error(&text('routes_edevice', &html_escape($in{'gatewaydev'})));
} }
&set_default_gateway($in{'gateway_def'} ? ( ) : &set_default_gateway($in{'gateway_def'} ? ( ) :

2
net/openbsd-lib.pl
View File

@@ -477,7 +477,7 @@ print &ui_table_row($text{'routes_routed'},
sub parse_routing sub parse_routing
{ {
$in{'defr_def'} || &check_ipaddress($in{'defr'}) || $in{'defr_def'} || &check_ipaddress($in{'defr'}) ||
&error(&text('routes_edefault', $in{'defr'})); &error(&text('routes_edefault', &html_escape($in{'defr'})));
&read_routing; &read_routing;

20
net/redhat-linux-lib.pl
View File

@@ -703,13 +703,13 @@ if (!$supports_dev_gateway) {
# Just update a single file # Just update a single file
if ($in{'gateway_def'}) { delete($conf{'GATEWAY'}); } if ($in{'gateway_def'}) { delete($conf{'GATEWAY'}); }
elsif (!&to_ipaddress($in{'gateway'})) { elsif (!&to_ipaddress($in{'gateway'})) {
&error(&text('routes_edefault', $in{'gateway'})); &error(&text('routes_edefault', &html_escape($in{'gateway'})));
} }
else { $conf{'GATEWAY'} = $in{'gateway'}; } else { $conf{'GATEWAY'} = $in{'gateway'}; }
if ($in{'gatewaydev_def'}) { delete($conf{'GATEWAYDEV'}); } if ($in{'gatewaydev_def'}) { delete($conf{'GATEWAYDEV'}); }
elsif ($in{'gatewaydev'} !~ /^\S+$/) { elsif ($in{'gatewaydev'} !~ /^\S+$/) {
&error(&text('routes_edevice', $in{'gatewaydev'})); &error(&text('routes_edevice', &html_escape($in{'gatewaydev'})));
} }
else { $conf{'GATEWAYDEV'} = $in{'gatewaydev'}; } else { $conf{'GATEWAYDEV'} = $in{'gatewaydev'}; }
} }
@@ -742,7 +742,7 @@ else {
local ($b) = grep { $_->{'fullname'} eq local ($b) = grep { $_->{'fullname'} eq
$in{"gatewaydev$r"} } @boot; $in{"gatewaydev$r"} } @boot;
$b->{'gateway'} && &error(&text('routes_eclash2', $b->{'gateway'} && &error(&text('routes_eclash2',
$in{"gatewaydev$r"})); &html_escape($in{"gatewaydev$r"})));
$b->{'gateway'} = $in{"gateway$r"}; $b->{'gateway'} = $in{"gateway$r"};
$b->{'gateway6'} = $in{"gateway6$r"}; $b->{'gateway6'} = $in{"gateway6$r"};
} }
@@ -763,10 +763,10 @@ else {
for($i=0; defined($dev = $in{"dev_$i"}); $i++) { for($i=0; defined($dev = $in{"dev_$i"}); $i++) {
next if (!$dev); next if (!$dev);
$net = $in{"net_$i"}; $netmask = $in{"netmask_$i"}; $gw = $in{"gw_$i"}; $net = $in{"net_$i"}; $netmask = $in{"netmask_$i"}; $gw = $in{"gw_$i"};
$dev =~ /^\S+$/ || &error(&text('routes_edevice', $dev)); $dev =~ /^\S+$/ || &error(&text('routes_edevice', &html_escape($dev)));
&to_ipaddress($net) || &error(&text('routes_enet', $net)); &to_ipaddress($net) || &error(&text('routes_enet', &html_escape($net)));
&check_ipaddress($netmask) || &error(&text('routes_emask', $netmask)); &check_ipaddress($netmask) || &error(&text('routes_emask', &html_escape($netmask)));
&to_ipaddress($gw) || &error(&text('routes_egateway', $gw)); &to_ipaddress($gw) || &error(&text('routes_egateway', &html_escape($gw)));
if ($netmask eq "255.255.255.255") { if ($netmask eq "255.255.255.255") {
push(@st, "$dev host $net gw $gw\n"); push(@st, "$dev host $net gw $gw\n");
} }
@@ -778,11 +778,11 @@ for($i=0; defined($dev = $in{"dev_$i"}); $i++) {
for($i=0; defined($dev = $in{"ldev_$i"}); $i++) { for($i=0; defined($dev = $in{"ldev_$i"}); $i++) {
$net = $in{"lnet_$i"}; $netmask = $in{"lnetmask_$i"}; $net = $in{"lnet_$i"}; $netmask = $in{"lnetmask_$i"};
next if (!$dev && !$net); next if (!$dev && !$net);
$dev =~ /^\S+$/ || &error(&text('routes_edevice', $dev)); $dev =~ /^\S+$/ || &error(&text('routes_edevice', &html_escape($dev)));
&to_ipaddress($net) || &to_ipaddress($net) ||
$net =~ /^(\S+)\/(\d+)$/ && &to_ipaddress("$1") || $net =~ /^(\S+)\/(\d+)$/ && &to_ipaddress("$1") ||
&error(&text('routes_enet', $net)); &error(&text('routes_enet', &html_escape($net)));
&check_ipaddress($netmask) || &error(&text('routes_emask', $netmask)); &check_ipaddress($netmask) || &error(&text('routes_emask', &html_escape($netmask)));
if ($netmask eq "255.255.255.255") { if ($netmask eq "255.255.255.255") {
push(@st, "$dev host $net\n"); push(@st, "$dev host $net\n");
} }

24
net/save_aifc.cgi
View File

@@ -31,12 +31,12 @@ else {
$in{'virtual'} =~ /^\d+$/ || $in{'virtual'} =~ /^\d+$/ ||
&error($text{'aifc_evirt'}); &error($text{'aifc_evirt'});
$in{'virtual'} >= $min_virtual_number || $in{'virtual'} >= $min_virtual_number ||
&error(&text('aifc_evirtmin', $min_virtual_number)); &error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
foreach $ea (@acts) { foreach $ea (@acts) {
if ($ea->{'name'} eq $in{'name'} && if ($ea->{'name'} eq $in{'name'} &&
$ea->{'virtual'} eq $in{'virtual'}) { $ea->{'virtual'} eq $in{'virtual'}) {
&error(&text('aifc_evirtdup', &error(&text('aifc_evirtdup',
"$in{'name'}:$in{'virtual'}")); &html_escape("$in{'name'}:$in{'virtual'}")));
} }
} }
$a->{'name'} = $in{'name'}; $a->{'name'} = $in{'name'};
@@ -50,11 +50,11 @@ else {
foreach $ea (@acts) { foreach $ea (@acts) {
if ($ea->{'name'} eq $1 && if ($ea->{'name'} eq $1 &&
$ea->{'virtual'} eq $3) { $ea->{'virtual'} eq $3) {
&error(&text('aifc_evirtdup', $in{'name'})); &error(&text('aifc_evirtdup', &html_escape($in{'name'})));
} }
} }
$3 >= $min_virtual_number || $3 >= $min_virtual_number ||
&error(&text('aifc_evirtmin', $min_virtual_number)); &error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
$a->{'name'} = $1; $a->{'name'} = $1;
$a->{'virtual'} = $3; $a->{'virtual'} = $3;
$a->{'fullname'} = $a->{'name'}.":".$a->{'virtual'}; $a->{'fullname'} = $a->{'name'}.":".$a->{'virtual'};
@@ -65,7 +65,7 @@ else {
# creating a real interface # creating a real interface
foreach $ea (@acts) { foreach $ea (@acts) {
if ($ea->{'name'} eq $in{'name'}) { if ($ea->{'name'} eq $in{'name'}) {
&error(&text('aifc_edup', $in{'name'})); &error(&text('aifc_edup', &html_escape($in{'name'})));
} }
} }
$a->{'name'} = $in{'name'}; $a->{'name'} = $in{'name'};
@@ -79,7 +79,7 @@ else {
# Validate and store inputs # Validate and store inputs
&check_ipaddress_any($in{'address'}) || &check_ipaddress_any($in{'address'}) ||
&error(&text('aifc_eip', $in{'address'})); &error(&text('aifc_eip', &html_escape($in{'address'})));
$a->{'address'} = $in{'address'}; $a->{'address'} = $in{'address'};
# Check for address clash # Check for address clash
@@ -88,7 +88,7 @@ else {
if (!$allow_clash && if (!$allow_clash &&
($in{'new'} || $olda->{'address'} ne $a->{'address'})) { ($in{'new'} || $olda->{'address'} ne $a->{'address'})) {
($clash) = grep { $_->{'address'} eq $a->{'address'} } @acts; ($clash) = grep { $_->{'address'} eq $a->{'address'} } @acts;
$clash && &error(&text('aifc_eclash', $clash->{'fullname'})); $clash && &error(&text('aifc_eclash', &html_escape($clash->{'fullname'})));
} }
if ($virtual_netmask && $a->{'virtual'} ne "") { if ($virtual_netmask && $a->{'virtual'} ne "") {
@@ -103,7 +103,7 @@ else {
} }
elsif (!$in{'netmask_def'}) { elsif (!$in{'netmask_def'}) {
&check_netmask($in{'netmask'},$a->{'address'}) || &check_netmask($in{'netmask'},$a->{'address'}) ||
&error(&text('aifc_emask', $in{'netmask'})); &error(&text('aifc_emask', &html_escape($in{'netmask'})));
$a->{'netmask'} = $in{'netmask'}; $a->{'netmask'} = $in{'netmask'};
} }
@@ -115,7 +115,7 @@ else {
} }
elsif (!$in{'broadcast_def'}) { elsif (!$in{'broadcast_def'}) {
&check_ipaddress_any($in{'broadcast'}) || &check_ipaddress_any($in{'broadcast'}) ||
&error(&text('aifc_ebroad', $in{'broadcast'})); &error(&text('aifc_ebroad', &html_escape($in{'broadcast'})));
$a->{'broadcast'} = $in{'broadcast'}; $a->{'broadcast'} = $in{'broadcast'};
} }
@@ -126,7 +126,7 @@ else {
} }
elsif (!$in{'mtu_def'}) { elsif (!$in{'mtu_def'}) {
$in{'mtu'} =~ /^\d+$/ || $in{'mtu'} =~ /^\d+$/ ||
&error(&text('aifc_emtu', $in{'mtu'})); &error(&text('aifc_emtu', &html_escape($in{'mtu'})));
$a->{'mtu'} = $in{'mtu'} if ($olda->{'mtu'} ne $in{'mtu'}); $a->{'mtu'} = $in{'mtu'} if ($olda->{'mtu'} ne $in{'mtu'});
} }
@@ -156,7 +156,7 @@ else {
&check_ip6address($in{'address6_'.$i}) || &check_ip6address($in{'address6_'.$i}) ||
&error(&text('aifc_eaddress6', $i+1)); &error(&text('aifc_eaddress6', $i+1));
$c = $clash6{$in{'address6_'.$i}}; $c = $clash6{$in{'address6_'.$i}};
$c && &error(&text('aifc_eclash6', $i+1, $c->{'name'})); $c && &error(&text('aifc_eclash6', $i+1, &html_escape($c->{'name'})));
push(@address6, $in{'address6_'.$i}); push(@address6, $in{'address6_'.$i});
$in{'netmask6_'.$i} =~ /^\d+$/ && $in{'netmask6_'.$i} =~ /^\d+$/ &&
$in{'netmask6_'.$i} > 0 && $in{'netmask6_'.$i} > 0 &&
@@ -178,7 +178,7 @@ else {
if (!$in{'ether_def'} && $a->{'virtual'} eq "" && if (!$in{'ether_def'} && $a->{'virtual'} eq "" &&
&iface_hardware($a->{'name'})) { &iface_hardware($a->{'name'})) {
$in{'ether'} =~ /^[A-Fa-f0-9:]+$/ || $in{'ether'} =~ /^[A-Fa-f0-9:]+$/ ||
&error(&text('aifc_ehard', $in{'ether'})); &error(&text('aifc_ehard', &html_escape($in{'ether'})));
$a->{'ether'} = $in{'ether'} $a->{'ether'} = $in{'ether'}
if ($olda->{'ether'} ne $in{'ether'}); if ($olda->{'ether'} ne $in{'ether'});
} }

24
net/save_bifc.cgi
View File

@@ -45,12 +45,12 @@ else {
$in{'virtual'} =~ /^\d+$/ || $in{'virtual'} =~ /^\d+$/ ||
&error($text{'bifc_evirt'}); &error($text{'bifc_evirt'});
$in{'virtual'} >= $min_virtual_number || $in{'virtual'} >= $min_virtual_number ||
&error(&text('aifc_evirtmin', $min_virtual_number)); &error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
foreach $eb (@boot) { foreach $eb (@boot) {
if ($eb->{'name'} eq $in{'name'} && if ($eb->{'name'} eq $in{'name'} &&
$eb->{'virtual'} eq $in{'virtual'}) { $eb->{'virtual'} eq $in{'virtual'}) {
&error(&text('bifc_evirtdup', &error(&text('bifc_evirtdup',
"$in{'name'}:$in{'virtual'}")); &html_escape("$in{'name'}:$in{'virtual'}")));
} }
} }
$b->{'name'} = $in{'name'}; $b->{'name'} = $in{'name'};
@@ -65,11 +65,11 @@ else {
foreach $eb (@boot) { foreach $eb (@boot) {
if ($eb->{'name'} eq $2 && if ($eb->{'name'} eq $2 &&
$eb->{'virtual'} eq $4) { $eb->{'virtual'} eq $4) {
&error(&text('bifc_evirtdup', $in{'name'})); &error(&text('bifc_evirtdup', &html_escape($in{'name'})));
} }
} }
$4 >= $min_virtual_number || $4 >= $min_virtual_number ||
&error(&text('aifc_evirtmin', $min_virtual_number)); &error(&text('aifc_evirtmin', &html_escape($min_virtual_number)));
$b->{'name'} = $1; $b->{'name'} = $1;
$b->{'virtual'} = $4; $b->{'virtual'} = $4;
$b->{'fullname'} = $b->{'name'}.":".$b->{'virtual'}; $b->{'fullname'} = $b->{'name'}.":".$b->{'virtual'};
@@ -109,7 +109,7 @@ else {
# Check for clash # Check for clash
foreach $eb (@boot) { foreach $eb (@boot) {
if ($eb->{'fullname'} eq $b->{'fullname'}) { if ($eb->{'fullname'} eq $b->{'fullname'}) {
&error(&text('bifc_edup', $in{'name'})); &error(&text('bifc_edup', &html_escape($in{'name'})));
} }
} }
} }
@@ -121,7 +121,7 @@ else {
($in{'new'} || $oldb->{'address'} ne $in{'address'})) { ($in{'new'} || $oldb->{'address'} ne $in{'address'})) {
($clash) = grep { $_->{'address'} eq $in{'address'} && ($clash) = grep { $_->{'address'} eq $in{'address'} &&
$_->{'up'} } @boot; $_->{'up'} } @boot;
$clash && &error(&text('aifc_eclash', $clash->{'fullname'})); $clash && &error(&text('aifc_eclash', &html_escape($clash->{'fullname'})));
} }
# Validate and store inputs # Validate and store inputs
@@ -139,7 +139,7 @@ else {
} }
else { else {
&valid_boot_address($in{'address'}) || &valid_boot_address($in{'address'}) ||
&error(&text('bifc_eip', $in{'address'})); &error(&text('bifc_eip', &html_escape($in{'address'})));
$b->{'address'} = $in{'address'}; $b->{'address'} = $in{'address'};
} }
@@ -169,7 +169,7 @@ else {
elsif (&can_edit("netmask", $b) && $access{'netmask'}) { elsif (&can_edit("netmask", $b) && $access{'netmask'}) {
$auto && !$in{'netmask'} || $auto && !$in{'netmask'} ||
&check_netmask($in{'netmask'}, $in{'address'}) || &check_netmask($in{'netmask'}, $in{'address'}) ||
&error(&text('bifc_emask', $in{'netmask'})); &error(&text('bifc_emask', &html_escape($in{'netmask'})));
$b->{'netmask'} = $in{'netmask'}; $b->{'netmask'} = $in{'netmask'};
} }
@@ -188,7 +188,7 @@ else {
# Manually entered broadcast # Manually entered broadcast
($auto && !$in{'broadcast'}) || ($auto && !$in{'broadcast'}) ||
&check_ipaddress($in{'broadcast'}) || &check_ipaddress($in{'broadcast'}) ||
&error(&text('bifc_ebroad', $in{'broadcast'})); &error(&text('bifc_ebroad', &html_escape($in{'broadcast'})));
$b->{'broadcast'} = $in{'broadcast'}; $b->{'broadcast'} = $in{'broadcast'};
} }
@@ -202,14 +202,14 @@ else {
$auto && !$in{'mtu'} || $auto && !$in{'mtu'} ||
$in{'mtu_def'} || $in{'mtu_def'} ||
$in{'mtu'} =~ /^\d+$/ || $in{'mtu'} =~ /^\d+$/ ||
&error(&text('bifc_emtu', $in{'mtu'})); &error(&text('bifc_emtu', &html_escape($in{'mtu'})));
$b->{'mtu'} = $in{'mtu_def'} ? undef : $in{'mtu'}; $b->{'mtu'} = $in{'mtu_def'} ? undef : $in{'mtu'};
} }
# MAC address # MAC address
if (defined($in{'ether'}) && !$in{'ether_def'}) { if (defined($in{'ether'}) && !$in{'ether_def'}) {
$in{'ether'} =~ /^[A-Fa-f0-9:]+$/ || $in{'ether'} =~ /^[A-Fa-f0-9:]+$/ ||
&error(&text('aifc_ehard', $in{'ether'})); &error(&text('aifc_ehard', &html_escape($in{'ether'})));
$b->{'ether'} = $in{'ether'}; $b->{'ether'} = $in{'ether'};
} }
else { else {
@@ -252,7 +252,7 @@ else {
&check_ip6address($in{'address6_'.$i}) || &check_ip6address($in{'address6_'.$i}) ||
&error(&text('aifc_eaddress6', $i+1)); &error(&text('aifc_eaddress6', $i+1));
$c = $clash6{$in{'address6_'.$i}}; $c = $clash6{$in{'address6_'.$i}};
$c && &error(&text('aifc_eclash6', $i+1, $c->{'name'})); $c && &error(&text('aifc_eclash6', $i+1, &html_escape($c->{'name'})));
push(@address6, $in{'address6_'.$i}); push(@address6, $in{'address6_'.$i});
$in{'netmask6_'.$i} =~ /^\d+$/ && $in{'netmask6_'.$i} =~ /^\d+$/ &&
$in{'netmask6_'.$i} > 0 && $in{'netmask6_'.$i} > 0 &&

8
net/save_dns.cgi
View File

@@ -9,14 +9,14 @@ $access{'dns'} == 2 || &error($text{'dns_ecannot'});
$old_hostname = &get_system_hostname(); $old_hostname = &get_system_hostname();
$in{'hostname'} =~ /^[A-z0-9\.\-]+$/ || $in{'hostname'} =~ /^[A-z0-9\.\-]+$/ ||
&error(&text('dns_ehost', $in{'hostname'})); &error(&text('dns_ehost', &html_escape($in{'hostname'})));
$dns = { }; $dns = { };
for($i=0; defined($ns = $in{"nameserver_$i"}); $i++) { for($i=0; defined($ns = $in{"nameserver_$i"}); $i++) {
$ns = $in{"nameserver_$i"}; $ns = $in{"nameserver_$i"};
$ns =~ s/^\s+//; $ns =~ s/\s+$//; $ns =~ s/^\s+//; $ns =~ s/\s+$//;
if ($ns) { if ($ns) {
&check_ipaddress_any($ns) || &check_ipaddress_any($ns) ||
&error(&text('dns_ens', $ns)); &error(&text('dns_ens', &html_escape($ns)));
push(@{$dns->{'nameserver'}}, $ns); push(@{$dns->{'nameserver'}}, $ns);
} }
} }
@@ -32,7 +32,7 @@ if ($in{'name0'}) {
$ns =~ s/^\s+//; $ns =~ s/\s+$//; $ns =~ s/^\s+//; $ns =~ s/\s+$//;
if ($ns) { if ($ns) {
&check_ipaddress_any($ns) || &check_ipaddress_any($ns) ||
&error(&text('dns_ens', $ns)); &error(&text('dns_ens', &html_escape($ns)));
push(@{$dns->{$nskey}}, $ns); push(@{$dns->{$nskey}}, $ns);
} }
} }
@@ -44,7 +44,7 @@ if (!$in{'domain_def'}) {
@dlist = split(/\s+/, $in{'domain'}); @dlist = split(/\s+/, $in{'domain'});
foreach $d (@dlist) { foreach $d (@dlist) {
$d =~ /^[A-z0-9\.\-]+$/ || $d =~ /^[A-z0-9\.\-]+$/ ||
&error(&text('dns_edomain', $d)); &error(&text('dns_edomain', &html_escape($d)));
push(@{$dns->{'domain'}}, $d); push(@{$dns->{'domain'}}, $d);
} }
@dlist || &error($text{'dns_esearch'}); @dlist || &error($text{'dns_esearch'});

4
net/save_host.cgi
View File

@@ -16,11 +16,11 @@ else {
# saving or updating a host # saving or updating a host
$whatfailed = "Failed to save host"; $whatfailed = "Failed to save host";
&check_ipaddress_any($in{'address'}) || &check_ipaddress_any($in{'address'}) ||
&error("'$in{'address'}' is not a valid IP address"); &error("'".&html_escape($in{'address'})."' is not a valid IP address");
@h = split(/\s+/, $in{'hosts'}); @h = split(/\s+/, $in{'hosts'});
foreach $h (@h) { foreach $h (@h) {
$h =~ /^[A-z0-9\-\.]+$/ || $h =~ /^[A-z0-9\-\.]+$/ ||
&error("'$h' is not a valid hostname"); &error("'".&html_escape($h)."' is not a valid hostname");
} }
@h>0 || &error("You must enter at least one hostname"); @h>0 || &error("You must enter at least one hostname");
if ($in{'new'}) { if ($in{'new'}) {

4
net/save_ipnode.cgi
View File

@@ -17,11 +17,11 @@ else {
$whatfailed = "Failed to save ipnode"; $whatfailed = "Failed to save ipnode";
&check_ipaddress($in{'address'}) || &check_ipaddress($in{'address'}) ||
&check_ip6address($in{'address'}) || &check_ip6address($in{'address'}) ||
&error("'$in{'address'}' is not a valid IPv4 or v6 address"); &error("'".&html_escape($in{'address'})."' is not a valid IPv4 or v6 address");
@h = split(/\s+/, $in{'ipnodes'}); @h = split(/\s+/, $in{'ipnodes'});
foreach $h (@h) { foreach $h (@h) {
$h =~ /^[A-z0-9\-\.]+$/ || $h =~ /^[A-z0-9\-\.]+$/ ||
&error("'$h' is not a valid ipnodename"); &error("'".&html_escape($h)."' is not a valid ipnodename");
} }
@h>0 || &error("You must enter at least one ipnodename"); @h>0 || &error("You must enter at least one ipnodename");
if ($in{'new'}) { if ($in{'new'}) {

2
net/slackware-linux-9.1-ALL-lib.pl
View File

@@ -298,7 +298,7 @@ sub parse_routing
local $gw = ""; local $gw = "";
if (!$in{'gw_def'}) { if (!$in{'gw_def'}) {
&check_ipaddress($in{'gw'}) || &check_ipaddress($in{'gw'}) ||
&error(&text('routes_edefault', $in{'gw'})); &error(&text('routes_edefault', &html_escape($in{'gw'})));
$gw = $in{'gw'}; $gw = $in{'gw'};
} }
&lock_file($inet_conf); &lock_file($inet_conf);

2
net/slackware-linux-lib.pl
View File

@@ -260,7 +260,7 @@ sub parse_routing
local $gw = ""; local $gw = "";
if (!$in{'gw_def'}) { if (!$in{'gw_def'}) {
&check_ipaddress($in{'gw'}) || &check_ipaddress($in{'gw'}) ||
&error(&text('routes_edefault', $in{'gw'})); &error(&text('routes_edefault', &html_escape($in{'gw'})));
$gw = $in{'gw'}; $gw = $in{'gw'};
} }
&lock_file($rc_init); &lock_file($rc_init);

6
net/solaris-lib.pl
View File

@@ -63,7 +63,7 @@ if (!$already) {
if ($a->{'virtual'} eq "") { if ($a->{'virtual'} eq "") {
local $out = &backquote_logged( local $out = &backquote_logged(
"ifconfig $a->{'name'} plumb 2>&1"); "ifconfig $a->{'name'} plumb 2>&1");
if ($out) { &error(&text('aifc_eexist', $a->{'name'})); } if ($out) { &error(&text('aifc_eexist', &html_escape($a->{'name'}))); }
} }
elsif ($gconfig{'os_version'} >= 8) { elsif ($gconfig{'os_version'} >= 8) {
&system_logged( &system_logged(
@@ -532,7 +532,7 @@ sub parse_routing
# Save IPv4 default routers # Save IPv4 default routers
local @defrt = split(/\s+/, $in{'defrt'}); local @defrt = split(/\s+/, $in{'defrt'});
foreach my $d (@defrt) { foreach my $d (@defrt) {
&to_ipaddress($d) || &error(&text('routes_edefault', $d)); &to_ipaddress($d) || &error(&text('routes_edefault', &html_escape($d)));
} }
&lock_file("/etc/defaultrouter"); &lock_file("/etc/defaultrouter");
if (@defrt) { if (@defrt) {
@@ -548,7 +548,7 @@ else {
# Save IPv6 default routers # Save IPv6 default routers
local @defrt6 = split(/\s+/, $in{'defrt6'}); local @defrt6 = split(/\s+/, $in{'defrt6'});
foreach my $d (@defrt6) { foreach my $d (@defrt6) {
&to_ip6address($d) || &error(&text('routes_edefault6', $d)); &to_ip6address($d) || &error(&text('routes_edefault6', &html_escape($d)));
} }
&lock_file("/etc/defaultrouter6"); &lock_file("/etc/defaultrouter6");
if (@defrt6) { if (@defrt6) {

14
net/suse-linux-9.0-lib.pl
View File

@@ -246,11 +246,11 @@ sub parse_routing
local (@routes, $r, $i); local (@routes, $r, $i);
if (!$in{'gateway_def'}) { if (!$in{'gateway_def'}) {
&to_ipaddress($in{'gateway'}) || &to_ipaddress($in{'gateway'}) ||
&error(&text('routes_edefault', $in{'gateway'})); &error(&text('routes_edefault', &html_escape($in{'gateway'})));
local @def = ( "default", $in{'gateway'}, undef, undef ); local @def = ( "default", $in{'gateway'}, undef, undef );
if (!$in{'gatewaydev_def'}) { if (!$in{'gatewaydev_def'}) {
$in{'gatewaydev'} =~ /^\S+$/ || $in{'gatewaydev'} =~ /^\S+$/ ||
&error(&text('routes_edevice', $in{'gatewaydev'})); &error(&text('routes_edevice', &html_escape($in{'gatewaydev'})));
$def[3] = $in{'gatewaydev'}; $def[3] = $in{'gatewaydev'};
} }
push(@routes, \@def); push(@routes, \@def);
@@ -259,14 +259,14 @@ for($i=0; defined($in{"dev_$i"}); $i++) {
next if (!$in{"net_$i"}); next if (!$in{"net_$i"});
&check_ipaddress($in{"net_$i"}) || &check_ipaddress($in{"net_$i"}) ||
$in{"net_$i"} =~ /^(\S+)\/(\d+)$/ && &check_ipaddress($1) || $in{"net_$i"} =~ /^(\S+)\/(\d+)$/ && &check_ipaddress($1) ||
&error(&text('routes_enet', $in{"net_$i"})); &error(&text('routes_enet', &html_escape($in{"net_$i"})));
$in{"dev_$i"} =~ /^\S*$/ || &error(&text('routes_edevice', $dev)); $in{"dev_$i"} =~ /^\S*$/ || &error(&text('routes_edevice', &html_escape($dev)));
!$in{"netmask_$i"} || &check_ipaddress($in{"netmask_$i"}) || !$in{"netmask_$i"} || &check_ipaddress($in{"netmask_$i"}) ||
&error(&text('routes_emask', $in{"netmask_$i"})); &error(&text('routes_emask', &html_escape($in{"netmask_$i"})));
!$in{"gw_$i"} || &check_ipaddress($in{"gw_$i"}) || !$in{"gw_$i"} || &check_ipaddress($in{"gw_$i"}) ||
&error(&text('routes_egateway', $in{"gw_$i"})); &error(&text('routes_egateway', &html_escape($in{"gw_$i"})));
$in{"type_$i"} =~ /^\S*$/ || $in{"type_$i"} =~ /^\S*$/ ||
&error(&text('routes_etype', $in{"type_$i"})); &error(&text('routes_etype', &html_escape($in{"type_$i"})));
push(@routes, [ $in{"net_$i"}, $in{"gw_$i"}, $in{"netmask_$i"}, push(@routes, [ $in{"net_$i"}, $in{"gw_$i"}, $in{"netmask_$i"},
$in{"dev_$i"}, $in{"type_$i"} ] ); $in{"dev_$i"}, $in{"type_$i"} ] );
} }

14
net/suse-linux-9.2-ALL-lib.pl
View File

@@ -333,11 +333,11 @@ sub parse_routing
local (@routes, $r, $i); local (@routes, $r, $i);
if (!$in{'gateway_def'}) { if (!$in{'gateway_def'}) {
&to_ipaddress($in{'gateway'}) || &to_ipaddress($in{'gateway'}) ||
&error(&text('routes_edefault', $in{'gateway'})); &error(&text('routes_edefault', &html_escape($in{'gateway'})));
local @def = ( "default", $in{'gateway'}, undef, undef ); local @def = ( "default", $in{'gateway'}, undef, undef );
if (!$in{'gatewaydev_def'}) { if (!$in{'gatewaydev_def'}) {
$in{'gatewaydev'} =~ /^\S+$/ || $in{'gatewaydev'} =~ /^\S+$/ ||
&error(&text('routes_edevice', $in{'gatewaydev'})); &error(&text('routes_edevice', &html_escape($in{'gatewaydev'})));
$def[3] = $in{'gatewaydev'}; $def[3] = $in{'gatewaydev'};
} }
push(@routes, \@def); push(@routes, \@def);
@@ -346,14 +346,14 @@ for($i=0; defined($in{"dev_$i"}); $i++) {
next if (!$in{"net_$i"}); next if (!$in{"net_$i"});
&check_ipaddress($in{"net_$i"}) || &check_ipaddress($in{"net_$i"}) ||
$in{"net_$i"} =~ /^(\S+)\/(\d+)$/ && &check_ipaddress($1) || $in{"net_$i"} =~ /^(\S+)\/(\d+)$/ && &check_ipaddress($1) ||
&error(&text('routes_enet', $in{"net_$i"})); &error(&text('routes_enet', &html_escape($in{"net_$i"})));
$in{"dev_$i"} =~ /^\S*$/ || &error(&text('routes_edevice', $dev)); $in{"dev_$i"} =~ /^\S*$/ || &error(&text('routes_edevice', &html_escape($dev)));
!$in{"netmask_$i"} || &check_ipaddress($in{"netmask_$i"}) || !$in{"netmask_$i"} || &check_ipaddress($in{"netmask_$i"}) ||
&error(&text('routes_emask', $in{"netmask_$i"})); &error(&text('routes_emask', &html_escape($in{"netmask_$i"})));
!$in{"gw_$i"} || &check_ipaddress($in{"gw_$i"}) || !$in{"gw_$i"} || &check_ipaddress($in{"gw_$i"}) ||
&error(&text('routes_egateway', $in{"gw_$i"})); &error(&text('routes_egateway', &html_escape($in{"gw_$i"})));
$in{"type_$i"} =~ /^\S*$/ || $in{"type_$i"} =~ /^\S*$/ ||
&error(&text('routes_etype', $in{"type_$i"})); &error(&text('routes_etype', &html_escape($in{"type_$i"})));
push(@routes, [ $in{"net_$i"}, $in{"gw_$i"}, $in{"netmask_$i"}, push(@routes, [ $in{"net_$i"}, $in{"gw_$i"}, $in{"netmask_$i"},
$in{"dev_$i"}, $in{"type_$i"} ] ); $in{"dev_$i"}, $in{"type_$i"} ] );
} }

12
net/suse-linux-lib.pl
View File

@@ -268,25 +268,25 @@ for($i=0; defined($dev = $in{"lr_dev_$i"}); $i++) {
$net = $in{"lr_net_$i"}; $mask = $in{"lr_mask_$i"}; $net = $in{"lr_net_$i"}; $mask = $in{"lr_mask_$i"};
next if (!$dev && !$net && !$mask); next if (!$dev && !$net && !$mask);
&to_ipaddress($net) || &to_ipaddress($net) ||
&error(&text('routes_enet', $net)); &error(&text('routes_enet', &html_escape($net)));
&check_ipaddress($mask) || &check_ipaddress($mask) ||
&error(&text('routes_emask', $mask)); &error(&text('routes_emask', &html_escape($mask)));
$route .= "$net\t\t0.0.0.0\t\t$mask\t\t$dev\n"; $route .= "$net\t\t0.0.0.0\t\t$mask\t\t$dev\n";
} }
for($i=0; defined($gw = $in{"sr_gw_$i"}); $i++) { for($i=0; defined($gw = $in{"sr_gw_$i"}); $i++) {
$net = $in{"sr_net_$i"}; $mask = $in{"sr_mask_$i"}; $net = $in{"sr_net_$i"}; $mask = $in{"sr_mask_$i"};
next if (!$gw && !$net && !$mask); next if (!$gw && !$net && !$mask);
&to_ipaddress($gw) || &to_ipaddress($gw) ||
&error(&text('routes_egateway', $gw)); &error(&text('routes_egateway', &html_escape($gw)));
&to_ipaddress($net) || &to_ipaddress($net) ||
&error(&text('routes_enet', $net)); &error(&text('routes_enet', &html_escape($net)));
&check_ipaddress($mask) || &check_ipaddress($mask) ||
&error(&text('routes_emask', $mask)); &error(&text('routes_emask', &html_escape($mask)));
$route .= "$net\t\t$gw\t\t$mask\n"; $route .= "$net\t\t$gw\t\t$mask\n";
} }
if (!$in{'default_def'}) { if (!$in{'default_def'}) {
&to_ipaddress($in{'default'}) || &to_ipaddress($in{'default'}) ||
&error(&text('routes_edefault', $in{'default'})); &error(&text('routes_edefault', &html_escape($in{'default'})));
$route .= "default\t\t$in{'default'}\n"; $route .= "default\t\t$in{'default'}\n";
} }
&open_tempfile(ROUTE, ">$route_conf"); &open_tempfile(ROUTE, ">$route_conf");

14
net/united-linux-lib.pl
View File

@@ -211,11 +211,11 @@ sub parse_routing
local (@routes, $r, $i); local (@routes, $r, $i);
if (!$in{'gateway_def'}) { if (!$in{'gateway_def'}) {
&to_ipaddress($in{'gateway'}) || &to_ipaddress($in{'gateway'}) ||
&error(&text('routes_edefault', $in{'gateway'})); &error(&text('routes_edefault', &html_escape($in{'gateway'})));
local @def = ( "default", $in{'gateway'}, undef, undef ); local @def = ( "default", $in{'gateway'}, undef, undef );
if (!$in{'gatewaydev_def'}) { if (!$in{'gatewaydev_def'}) {
$in{'gatewaydev'} =~ /^\S+$/ || $in{'gatewaydev'} =~ /^\S+$/ ||
&error(&text('routes_edevice', $in{'gatewaydev'})); &error(&text('routes_edevice', &html_escape($in{'gatewaydev'})));
$def[3] = $in{'gatewaydev'}; $def[3] = $in{'gatewaydev'};
} }
push(@routes, \@def); push(@routes, \@def);
@@ -224,14 +224,14 @@ for($i=0; defined($in{"dev_$i"}); $i++) {
next if (!$in{"net_$i"}); next if (!$in{"net_$i"});
&check_ipaddress($in{"net_$i"}) || &check_ipaddress($in{"net_$i"}) ||
$in{"net_$i"} =~ /^(\S+)\/(\d+)$/ && &check_ipaddress($1) || $in{"net_$i"} =~ /^(\S+)\/(\d+)$/ && &check_ipaddress($1) ||
&error(&text('routes_enet', $in{"net_$i"})); &error(&text('routes_enet', &html_escape($in{"net_$i"})));
$in{"dev_$i"} =~ /^\S*$/ || &error(&text('routes_edevice', $dev)); $in{"dev_$i"} =~ /^\S*$/ || &error(&text('routes_edevice', &html_escape($dev)));
!$in{"netmask_$i"} || &check_ipaddress($in{"netmask_$i"}) || !$in{"netmask_$i"} || &check_ipaddress($in{"netmask_$i"}) ||
&error(&text('routes_emask', $in{"netmask_$i"})); &error(&text('routes_emask', &html_escape($in{"netmask_$i"})));
!$in{"gw_$i"} || &check_ipaddress($in{"gw_$i"}) || !$in{"gw_$i"} || &check_ipaddress($in{"gw_$i"}) ||
&error(&text('routes_egateway', $in{"gw_$i"})); &error(&text('routes_egateway', &html_escape($in{"gw_$i"})));
$in{"type_$i"} =~ /^\S*$/ || $in{"type_$i"} =~ /^\S*$/ ||
&error(&text('routes_etype', $in{"type_$i"})); &error(&text('routes_etype', &html_escape($in{"type_$i"})));
push(@routes, [ $in{"net_$i"}, $in{"gw_$i"}, $in{"netmask_$i"}, push(@routes, [ $in{"net_$i"}, $in{"gw_$i"}, $in{"netmask_$i"},
$in{"dev_$i"}, $in{"type_$i"} ] ); $in{"dev_$i"}, $in{"type_$i"} ] );
} }

4
net/unixware-lib.pl
View File

@@ -42,7 +42,7 @@ sub activate_interface
local $a = $_[0]; local $a = $_[0];
if ($a->{'virtual'} eq "") { if ($a->{'virtual'} eq "") {
local $out = &backquote_logged("ifconfig $a->{'name'} plumb 2>&1"); local $out = &backquote_logged("ifconfig $a->{'name'} plumb 2>&1");
if ($out) { &error("Interface '$a->{'name'}' does not exist"); } if ($out) { &error("Interface '".&html_escape($a->{'name'})."' does not exist"); }
} }
local $cmd = "ifconfig $a->{'name'}"; local $cmd = "ifconfig $a->{'name'}";
if ($a->{'virtual'} ne "") { $cmd .= ":$a->{'virtual'}"; } if ($a->{'virtual'} ne "") { $cmd .= ":$a->{'virtual'}"; }
@@ -370,7 +370,7 @@ sub parse_routing
{ {
local @defrt = split(/\s+/, $in{'defrt'}); local @defrt = split(/\s+/, $in{'defrt'});
foreach my $d (@defrt) { foreach my $d (@defrt) {
&to_ipaddress($d) || &error(&text('routes_edefault', $d)); &to_ipaddress($d) || &error(&text('routes_edefault', &html_escape($d)));
} }
&lock_file("/etc/defaultrouter"); &lock_file("/etc/defaultrouter");
if (@defrt) { if (@defrt) {

6
time/apply.cgi
View File

@@ -35,7 +35,7 @@ if ($in{'action'} eq $text{'action_sync'}) {
&error( $text{ 'acl_nosys' } ) if( $access{ 'sysdate' } ); &error( $text{ 'acl_nosys' } ) if( $access{ 'sysdate' } );
$err = &set_system_time($in{ 'second' }, $in{'minute'}, $in{'hour'}, $err = &set_system_time($in{ 'second' }, $in{'minute'}, $in{'hour'},
$in{'date'}, $in{'month'}-1, $in{'year'}-1900); $in{'date'}, $in{'month'}-1, $in{'year'}-1900);
&error($err) if ($err); &error(&html_escape($err)) if ($err);
&webmin_log("set", "date", time(), \%in); &webmin_log("set", "date", time(), \%in);
} elsif ($in{'action'} eq $text{'action_save'} || $in{'mode'} eq 'hwdate' ) { } elsif ($in{'action'} eq $text{'action_save'} || $in{'mode'} eq 'hwdate' ) {
@@ -43,7 +43,7 @@ if ($in{'action'} eq $text{'action_sync'}) {
&error( $text{ 'acl_nohw' } ) if( $access{ 'hwdate' } ); &error( $text{ 'acl_nohw' } ) if( $access{ 'hwdate' } );
$err = &set_hardware_time($in{ 'second' }, $in{'minute'}, $in{'hour'}, $err = &set_hardware_time($in{ 'second' }, $in{'minute'}, $in{'hour'},
$in{'date'}, $in{'month'}-1, $in{'year'}-1900); $in{'date'}, $in{'month'}-1, $in{'year'}-1900);
&error( &text( 'error_hw', $err ) ) if ($err); &error( &text( 'error_hw', &html_escape($err) ) ) if ($err);
local $hwtime = timelocal($in{'second'}, $in{'minute'}, $in{'hour'}, local $hwtime = timelocal($in{'second'}, $in{'minute'}, $in{'hour'},
$in{'date'}, $in{'month'}-1, $in{'year'} < 200 ? $in{'date'}, $in{'month'}-1, $in{'year'} < 200 ?
$in{'year'} : $in{'year'}-1900); $in{'year'} : $in{'year'}-1900);
@@ -54,7 +54,7 @@ if ($in{'action'} eq $text{'action_sync'}) {
$access{'ntp'} || &error($text{'acl_nontp'}); $access{'ntp'} || &error($text{'acl_nontp'});
$in{'timeserver'} =~ /\S/ || &error($text{'error_etimeserver'}); $in{'timeserver'} =~ /\S/ || &error($text{'error_etimeserver'});
$err = &sync_time($in{'timeserver'}, $in{'hardware'}); $err = &sync_time($in{'timeserver'}, $in{'hardware'});
&error($err) if ($err); &error(&html_escape($err)) if ($err);
# Save settings in module config # Save settings in module config
&lock_file($module_config_file); &lock_file($module_config_file);