diff options
| author | Ivan Kohler <ivan@freeside.biz> | 2013-01-26 13:18:10 -0800 |
|---|---|---|
| committer | Ivan Kohler <ivan@freeside.biz> | 2013-01-26 13:18:10 -0800 |
| commit | c2746333f313511c6f7e19bdbef5622d1e4014e0 (patch) | |
| tree | 0512e3fd513a26056d13580d5fdc3575100ee5a8 | |
| parent | d6abfe4e240cc8b9994390e956d109663ee898a1 (diff) | |
untaint spam tag levels
| -rw-r--r-- | FS/FS/part_export/status_shellcommands.pm | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/FS/FS/part_export/status_shellcommands.pm b/FS/FS/part_export/status_shellcommands.pm index 53d2b3754..c5200ec50 100644 --- a/FS/FS/part_export/status_shellcommands.pm +++ b/FS/FS/part_export/status_shellcommands.pm @@ -43,6 +43,10 @@ sub _export_unsuspend {} sub export_setstatus { my($self, $svc_acct, $hashref) = @_; + for (qw( spam_tag2_level spam_kill_level )) { + $hashref->{$_} =~ /^\d+(\.\d+)?$/ or return "illegal $_"; + } + my @shellargs = ( $svc_acct->svcnum, user => $self->option('user') || 'root', |