tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

remove special characters from agent alias string on creation and trim blank spaces from beginning and end of alias string 

Former-commit-id: 2294ef705ac0df638bc897f56ff9e9beff8379fc
This commit is contained in:
alejandro-campos 2018-12-20 13:35:57 +01:00
parent c9ac5d9313
commit 91e90a1b26
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pandora_console/godmode/agentes/configurar_agente.php
View File

@ -157,7 +157,7 @@ $module_macros = array ();
// Create agent // Create agent
if ($create_agent) { if ($create_agent) {
$mssg_warning = 0; $mssg_warning = 0;
$alias = (string) get_parameter_post("alias",''); $alias = trim (preg_replace('/[\/\\\|%#&$-]/', '', html_entity_decode( str_replace('`','‘',(string) get_parameter_post ("alias", "")))));
$alias_as_name = (int) get_parameter_post("alias_as_name", 0); $alias_as_name = (int) get_parameter_post("alias_as_name", 0);
$direccion_agente = (string) get_parameter_post("direccion",''); $direccion_agente = (string) get_parameter_post("direccion",'');
@ -709,7 +709,7 @@ if ($update_agent) { // if modified some agent paramenter
$mssg_warning = 0; $mssg_warning = 0;
$id_agente = (int) get_parameter_post ("id_agente"); $id_agente = (int) get_parameter_post ("id_agente");
$nombre_agente = str_replace('`','‘',(string) get_parameter_post ("agente", "")); $nombre_agente = str_replace('`','‘',(string) get_parameter_post ("agente", ""));
$alias = str_replace('`','‘',(string) get_parameter_post ("alias", "")); $alias = trim (preg_replace('/[\/\\\|%#&$-]/', '', html_entity_decode( str_replace('`','‘',(string) get_parameter_post ("alias", "")))));
$alias_as_name = (int) get_parameter_post ('alias_as_name', 0); $alias_as_name = (int) get_parameter_post ('alias_as_name', 0);
$direccion_agente = (string) get_parameter_post ("direccion", ''); $direccion_agente = (string) get_parameter_post ("direccion", '');
//safe_output only validate ip //safe_output only validate ip