mirror of
https://github.com/billz/raspap-webgui.git
synced 2023-10-10 13:37:24 +02:00
3db99c7d21
the command `ip address show eth0` returns special characters like "<" and ">" which, if left unescaped and shown on the page, will create arbitrary html elements and hide information. * show interface settings inside unstyled pre block interface properties should be parsed and displayed in a proprietary and pretty manner. until then, give use the raw output of `ip address show`
17 lines
525 B
PHP
17 lines
525 B
PHP
<?php
|
|
session_start();
|
|
include_once('../../includes/functions.php');
|
|
|
|
if(isset($_POST['interface']) && isset($_POST['csrf_token']) && CSRFValidate()) {
|
|
$int = preg_replace('/[^a-z0-9]/','',$_POST['interface']);
|
|
exec('ip a s '.$int,$intOutput,$intResult);
|
|
$intOutput = array_map('htmlentities', $intOutput);
|
|
$jsonData = ['return'=>$intResult,'output'=>$intOutput];
|
|
echo json_encode($jsonData);
|
|
} else {
|
|
$jsonData = ['return'=>2,'output'=>['Error getting data']];
|
|
echo json_encode($jsonData);
|
|
}
|
|
|
|
?>
|