diff options
author | Phil Davis <phil.davis@inf.org> | 2015-02-21 19:38:01 +0545 |
---|---|---|
committer | Phil Davis <phil.davis@inf.org> | 2015-02-21 19:38:01 +0545 |
commit | 93656e41097c250d9951000261effca93118e1bd (patch) | |
tree | d5ef335617e2dcf7817cb69b9005c3b61409e76f /config/suricata/suricata_geoipupdate.php | |
parent | 44b7ee6dec8c2b37e757af697262e9cecbf173fe (diff) | |
download | pfsense-packages-93656e41097c250d9951000261effca93118e1bd.tar.gz pfsense-packages-93656e41097c250d9951000261effca93118e1bd.tar.bz2 pfsense-packages-93656e41097c250d9951000261effca93118e1bd.zip |
Validate widget_snort_display_lines
Currently if you open the snort widget settings and just press "save" with a blank field, it sets the parameter to blank. Subsequently that causes problems trying to fetch the last "" number of alerts, and actually the little "tool" icon never reappears, so you cannot fix it from the dashboard.
1) Setting the number of entries to 0 seems silly, so limit it to a minimum of 1 alert.
2) If the user blanks the box, then unset widget_snort_display_lines to make sure things will always revert to the default.
3) Whatever else the user types in - "abc", "-999", "23xyz99" - try to interpret it as an int (with intval()), then do not let it be less than 1 (not negative or zero).
This forum entry made me touch it and "break" my widget also: https://forum.pfsense.org/index.php?topic=89161.0
Diffstat (limited to 'config/suricata/suricata_geoipupdate.php')
0 files changed, 0 insertions, 0 deletions