--- misc/scripts/cgi/taillog.cgi	2001/03/09 00:22:30	1.1
+++ misc/scripts/cgi/taillog.cgi	2002/05/10 17:44:23	1.5
@@ -12,7 +12,12 @@ if (defined $grep) {
         $grepStr = "";
     }
     else {
-        $grepStr = " | grep $grep";
+        if ($grep =~ /^[a-zA-Z_\-0-9\.\/]+$/) {
+            $grepStr = " | grep $grep";
+        }
+        else {
+            $grepStr = "";
+        }
     }
 }
 else {
@@ -23,7 +28,7 @@ if (!defined $n) {
     $n = 50;
 }
 
-unless ($n =~ /^[0-9]{1,4}$/) {
+unless ($n =~ /^[0-9]{1,6}$/) {
     $n = 50;
 }
 
@@ -52,7 +57,7 @@ text="#000066">
 
 <form method="GET" action="taillog.cgi">
 <font size="+1"><b>
-Last <input type="text" name="n" value="$n" size="4" maxlength="5"> lines
+Last <input type="text" name="n" value="$n" size="5" maxlength="5"> lines
 of the server logfile.
 | grep </b><input type="text" name="grep" value="$grep" size="20" maxlength="40">
 <input type="submit" value="Enter">
@@ -88,7 +93,7 @@ sub HTML_encode ($){
     $encoded =~ s/</&lt;/g;
     $encoded =~ s/>/&gt;/g;
     $encoded =~ s/^(.{0})(.*core\.loggers\..*: started)$/<hr size=10 color=blue>$2/;
-    $encoded =~ s/(.*)] (.*)}:(.*)/$1] <i>$2<\/i>:<b>$3<\/b>/;
+    $encoded =~ s/(.*)] (.*)}:(.*)/$1] <i>$2}<\/i>:<b>$3<\/b>/;
     return $encoded;
 }