65 lines
		
	
	
		
			1.4 KiB
		
	
	
	
		
			PHP
		
	
			
		
		
	
	
			65 lines
		
	
	
		
			1.4 KiB
		
	
	
	
		
			PHP
		
	
| <?php
 | |
| 
 | |
| // sanitize all input vars that may end up in URLs or forms
 | |
| 
 | |
| $platform_id = htmlspecialchars($_REQUEST['platform']);
 | |
| if (isset($_REQUEST['page'])) {
 | |
|     $page = htmlspecialchars($_REQUEST['page']);
 | |
| } else {
 | |
|     $page = 'dashboard';
 | |
| }
 | |
| if (isset($_REQUEST['item'])) {
 | |
|     $item = htmlspecialchars($_REQUEST['item']);
 | |
| } else {
 | |
|     $item = '';
 | |
| }
 | |
| 
 | |
| if (isset($_REQUEST['from_time'])) {
 | |
|     $from_time = htmlspecialchars($_REQUEST['from_time']);
 | |
| }
 | |
| if (isset($_REQUEST['until_time'])) {
 | |
|     $until_time = htmlspecialchars($_REQUEST['until_time']);
 | |
| }
 | |
| 
 | |
| // sanitize session vars
 | |
| if (isset($_SESSION)) {
 | |
|     foreach ($_SESSION as $key => $value) {
 | |
|         if (is_string($value)) {
 | |
|             $_SESSION[$key] = htmlspecialchars($value);
 | |
|         }
 | |
|     }
 | |
| }
 | |
| 
 | |
| // hosts
 | |
| if (isset($_POST['address'])) {
 | |
|     $address = htmlspecialchars($_POST['address']);
 | |
| }
 | |
| if (isset($_POST['port'])) {
 | |
|     $port = htmlspecialchars($_POST['port']);
 | |
| }
 | |
| if (isset($_POST['name'])) {
 | |
|     $name = htmlspecialchars($_POST['name']);
 | |
| }
 | |
| 
 | |
| // agents
 | |
| if (isset($_POST['type'])) {
 | |
|     $type = htmlspecialchars($_POST['type']);
 | |
| }
 | |
| if (isset($_POST['url'])) {
 | |
|     $url = htmlspecialchars($_POST['url']);
 | |
| }
 | |
| if (isset($_POST['secret_key'])) {
 | |
|     $secret_key = htmlspecialchars($_POST['secret_key']);
 | |
| }
 | |
| if (isset($_POST['check_period'])) {
 | |
|     $check_period = htmlspecialchars($_POST['check_period']);
 | |
| }
 | |
| 
 | |
| // platforms
 | |
| if (isset($_POST['name'])) {
 | |
|     $name = htmlspecialchars($_POST['name']);
 | |
| }
 | |
| 
 | |
| 
 | |
| ?>
 |