security fixes. AMG SECURIITAHHHHHHHHH!

git-svn-id: http://www.observium.org/svn/observer/trunk@305 61d68cd4-352d-0410-923a-c4978735b2b8

html/netcmd.php

@@ -1,5 +1,19 @@
 <?php
 
+include_once("Net/IPv6.php");
+
+function check_ip($ip)
+{
+  if ($ip == long2ip(ip2long($ip))) {
+    return true;
+  } else {
+      return false;
+  }
+}
+
+if($_GET['query']) {
+  $ip = $_GET['query'];
+  if(Net_IPv6::checkIPv6($ip)||check_ip($ip)) {
     switch ($_GET[cmd]) {
       case 'whois':
         $output = `/usr/bin/whois $_GET[query] | grep -v \%`;
@@ -14,6 +28,9 @@ switch ($_GET[cmd]) {
         $output = `/usr/bin/nmap $_GET[query]`;
         break; 
     }
+  }
+}
+
 $output = trim($output);
 echo("<pre>$output</pre>");
 

html/whois.php

@@ -1,10 +0,0 @@
-<?php
-
-
-$output = `/usr/bin/whois $_GET[query] | grep -v \%`;
-
-$output = trim($output);
-
-echo("<pre>$output</pre>");
-
-?>