diff options
| author | Ivan Kohler <ivan@freeside.biz> | 2013-01-26 13:18:12 -0800 |
|---|---|---|
| committer | Ivan Kohler <ivan@freeside.biz> | 2013-01-26 13:18:12 -0800 |
| commit | 307a395270395bd437347d44a94723f4b6fcf238 (patch) | |
| tree | 42d66b46a2bf4b1c53a0117ab2e413e2f5a3b3c2 | |
| parent | f8097abf38654a86e0de1a798f88bb12eb980a35 (diff) | |
untaint spam tag levels
| -rw-r--r-- | FS/FS/part_export/status_shellcommands.pm | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/FS/FS/part_export/status_shellcommands.pm b/FS/FS/part_export/status_shellcommands.pm index 53d2b3754..c5200ec50 100644 --- a/FS/FS/part_export/status_shellcommands.pm +++ b/FS/FS/part_export/status_shellcommands.pm @@ -43,6 +43,10 @@ sub _export_unsuspend {} sub export_setstatus { my($self, $svc_acct, $hashref) = @_; + for (qw( spam_tag2_level spam_kill_level )) { + $hashref->{$_} =~ /^\d+(\.\d+)?$/ or return "illegal $_"; + } + my @shellargs = ( $svc_acct->svcnum, user => $self->option('user') || 'root', |