summaryrefslogtreecommitdiffstats
path: root/cgi-bin
diff options
context:
space:
mode:
Diffstat (limited to 'cgi-bin')
-rwxr-xr-xcgi-bin/provisioning.cgi2
1 files changed, 1 insertions, 1 deletions
diff --git a/cgi-bin/provisioning.cgi b/cgi-bin/provisioning.cgi
index ee12e22..f0de432 100755
--- a/cgi-bin/provisioning.cgi
+++ b/cgi-bin/provisioning.cgi
@@ -124,7 +124,7 @@ elseif ( request_method == "PUT" ) then
local success = true
-- Protect against writing to arbitrary paths
- if string.match(path_info, "%.%.") then
+ if not mac or mac == "" or string.match(path_info, "%.%.") then
http_code(403)
log:close()
os.exit()