--- misc/scripts/cgi/taillog.cgi 2001/03/26 21:15:18 1.2
+++ misc/scripts/cgi/taillog.cgi 2004/08/01 10:39:51 1.6
@@ -12,7 +12,12 @@ if (defined $grep) {
$grepStr = "";
}
else {
- $grepStr = " | grep $grep";
+ if ($grep =~ /^[a-zA-Z_\-0-9\.\/]+$/) {
+ $grepStr = " | grep $grep";
+ }
+ else {
+ $grepStr = "";
+ }
}
}
else {
@@ -48,7 +53,7 @@ system, unix, linux, nt, server, alert">
<body bgcolor="#ffffff" link="#0000ff" alink="#3333cc" vlink="#3333cc"
text="#000066">
-<a href="http://www.i-scream.org.uk"><img border="0" src="/i-scream.gif"></a>
+<a href="http://www.i-scream.org"><img border="0" src="/i-scream.gif"></a>
<form method="GET" action="taillog.cgi">
<font size="+1"><b>
@@ -88,7 +93,7 @@ sub HTML_encode ($){
$encoded =~ s/</</g;
$encoded =~ s/>/>/g;
$encoded =~ s/^(.{0})(.*core\.loggers\..*: started)$/<hr size=10 color=blue>$2/;
- $encoded =~ s/(.*)] (.*)}:(.*)/$1] <i>$2<\/i>:<b>$3<\/b>/;
+ $encoded =~ s/(.*)] (.*)}:(.*)/$1] <i>$2}<\/i>:<b>$3<\/b>/;
return $encoded;
}