From 692d206f2229487cc71b1a5805fbdfdbb6c541a7 Mon Sep 17 00:00:00 2001 From: kkalev Date: Mon, 14 Mar 2005 11:57:34 +0000 Subject: [PATCH] Correctly check nas validity in nas_admin.php3. Bug noted by Nick Bright --- dialup_admin/Changelog | 1 + dialup_admin/htdocs/nas_admin.php3 | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/dialup_admin/Changelog b/dialup_admin/Changelog index a06dc5d..95ca0de 100644 --- a/dialup_admin/Changelog +++ b/dialup_admin/Changelog @@ -27,6 +27,7 @@ Ver 1.78: * Show the correct nas type in nas_admin. Bug noted by Nick Bright * Correctly calculate the nas ip in lib/sql/nas_list.php3. Add a check_ip() function in lib/functions.php3 Bug noted by Nick Bright +* Correctly check nas validity in nas_admin.php3. Bug noted by Nick Bright Ver 1.75: * A LOT of security related fixes. Now dialupadmin should hopefully be secure enough to be accessed by normal users (not administrators). diff --git a/dialup_admin/htdocs/nas_admin.php3 b/dialup_admin/htdocs/nas_admin.php3 index 9390198..f2bb7f0 100644 --- a/dialup_admin/htdocs/nas_admin.php3 +++ b/dialup_admin/htdocs/nas_admin.php3 @@ -45,7 +45,7 @@ if ($link){ $selected_nas = da_sql_escape_string($selected_nas); switch ($action) { case 'check_nas': - if ($selected_nas == gethostbyname($selected_nas)) + if (!check_ip($selected_nas) && $selected_nas == gethostbyname($selected_nas)) $msg = "The NAS name is not valid
\n"; else $msg = "The NAS name is valid
\n"; -- 2.1.4