Sanitize country POST input

This commit is contained in:
billz 2024-03-08 21:14:33 +01:00
parent eabd356bcb
commit d5009e0c1e

View File

@ -50,7 +50,7 @@ function DisplayProviderConfig()
if (!RASPI_MONITOR_ENABLED) { if (!RASPI_MONITOR_ENABLED) {
if (isset($_POST['SaveProviderSettings'])) { if (isset($_POST['SaveProviderSettings'])) {
if (isset($_POST['country'])) { if (isset($_POST['country'])) {
$country = trim($_POST['country']); $country = escapeshellarg(trim($_POST['country']));
if (strlen($country) == 0) { if (strlen($country) == 0) {
$status->addMessage('Select a country from the server location list', 'danger'); $status->addMessage('Select a country from the server location list', 'danger');
} else { } else {