From db0e1ca2033278f036736aee29e6f56c63460eef Mon Sep 17 00:00:00 2001
From: laf <neil@lathwood.co.uk>
Date: Thu, 2 Jun 2016 06:56:45 +0000
Subject: [PATCH] Resolved some security issues

---
 html/netcmd.php      | 4 ++--
 html/network-map.php | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/html/netcmd.php b/html/netcmd.php
index c635552af3..c5c284e9dc 100644
--- a/html/netcmd.php
+++ b/html/netcmd.php
@@ -36,7 +36,7 @@ if (!$_SESSION['authenticated']) {
 $output = '';
 if ($_GET['query'] && $_GET['cmd']) {
     $host = $_GET['query'];
-    if (Net_IPv6::checkIPv6($host) || Net_IPv4::validateip($host) || preg_match('/^[a-zA-Z0-9.-]*$/', $host)) {
+    if (Net_IPv6::checkIPv6($host) || Net_IPv4::validateip($host) || filter_var('http://'.$host, FILTER_VALIDATE_URL)) {
         switch ($_GET['cmd']) {
         case 'whois':
             $cmd = $config['whois']." $host | grep -v \%";
@@ -66,5 +66,5 @@ if ($_GET['query'] && $_GET['cmd']) {
     }//end if
 }//end if
 
-$output = trim($output);
+$output = htmlentities(trim($output), ENT_QUOTES);
 echo "<pre>$output</pre>";
diff --git a/html/network-map.php b/html/network-map.php
index 040464c784..6506898478 100644
--- a/html/network-map.php
+++ b/html/network-map.php
@@ -44,7 +44,7 @@ if (is_array($config['branding'])) {
     }
 }
 
-if (isset($_GET['device'])) {
+if (is_numeric($_GET['device']) && isset($_GET['device'])) {
     $where = 'WHERE device_id = '.mres($_GET['device']);
 }
 else {