Update method to POST + escapeshellarg()

This commit is contained in:
billz
2021-05-01 17:24:37 +01:00
parent 08164f43f1
commit 3a41b52c1d
2 changed files with 4 additions and 4 deletions

View File

@@ -3,11 +3,11 @@
require '../../includes/csrf.php';
require_once '../../includes/config.php';
$interface = $_GET['iface'];
$interface = $_POST['iface'];
if (isset($interface)) {
// fetch dnsmasq.conf settings for interface
exec('cat '. RASPI_DNSMASQ_PREFIX.$interface.'.conf', $return);
exec('cat '. RASPI_DNSMASQ_PREFIX.escapeshellarg($interface).'.conf', $return);
$conf = ParseConfig($return);
$dhcpdata['DHCPEnabled'] = empty($conf) ? false : true;