Project

General

Profile

« Previous | Next » 

Revision 4611e283

Added by Steve Beaver over 8 years ago

Revisions to GET/POST conversion limiting POSTs to save, apply, and delete functions

View differences:

src/usr/local/www/system_crlmanager.php
37 37 
	"internal" => gettext("Create an internal Certificate Revocation List"),
38 38 
	"existing" => gettext("Import an existing Certificate Revocation List"));
39 39 

  		




  40
  
  
    
if (isset($_POST['id']) && ctype_alnum($_POST['id'])) {


  		




  41
  
  
    
	$id = $_POST['id'];


  		




  
  40
  
    
if (isset($_REQUEST['id']) && ctype_alnum($_REQUEST['id'])) {


  		




  
  41
  
    
	$id = $_REQUEST['id'];


  		




  42
  42
  
    
}


  		




  43
  43
  
    

  		




  44
  44
  
    
if (!is_array($config['ca'])) {


  		




  ......




  65
  65
  
    
	}


  		




  66
  66
  
    
}


  		




  67
  67
  
    

  		




  68
  
  
    
$act = $_POST['act'];


  		




  
  68
  
    
$act = $_REQUEST['act'];


  		




  69
  69
  
    

  		




  70
  70
  
    

  		




  71
  71
  
    
if (!empty($id)) {


  		




  ......




  80
  80
  
    
	$class = "danger";


  		




  81
  81
  
    
}


  		




  82
  82
  
    

  		




  83
  
  
    
if ($act == "del") {


  		




  
  83
  
    
if ($_POST['act'] == "del") {


  		




  84
  84
  
    
	$name = htmlspecialchars($thiscrl['descr']);


  		




  85
  85
  
    
	if (crl_in_use($id)) {


  		




  86
  86
  
    
		$savemsg = sprintf(gettext("Certificate Revocation List %s is in use and cannot be deleted."), $name);


  		




  ......




  98
  98
  
    
}


  		




  99
  99
  
    

  		




  100
  100
  
    
if ($act == "new") {


  		




  101
  
  
    
	$pconfig['method'] = $_POST['method'];


  		




  102
  
  
    
	$pconfig['caref'] = $_POST['caref'];


  		




  
  101
  
    
	$pconfig['method'] = $_REQUEST['method'];


  		




  
  102
  
    
	$pconfig['caref'] = $_REQUEST['caref'];


  		




  103
  103
  
    
	$pconfig['lifetime'] = "9999";


  		




  104
  104
  
    
	$pconfig['serial'] = "0";


  		




  105
  105
  
    
}


  		




  ......




  120
  120
  
    
if ($act == "addcert") {


  		




  121
  121
  
    

  		




  122
  122
  
    
	unset($input_errors);


  		




  123
  
  
    
	$pconfig = $_POST;


  		




  
  123
  
    
	$pconfig = $_REQUEST;


  		




  124
  124
  
    

  		




  125
  125
  
    
	if (!$pconfig['crlref'] || !$pconfig['certref']) {


  		




  126
  126
  
    
		pfSenseHeader("system_crlmanager.php");


  		




  ......




  161
  161
  
    
	}


  		




  162
  162
  
    
	$found = false;


  		




  163
  163
  
    
	foreach ($thiscrl['cert'] as $acert) {


  		




  164
  
  
    
		if ($acert['refid'] == $_POST['certref']) {


  		




  
  164
  
    
		if ($acert['refid'] == $_REQUEST['certref']) {


  		




  165
  165
  
    
			$found = true;


  		




  166
  166
  
    
			$thiscert = $acert;


  		




  167
  167
  
    
		}


  		




  ......




  607
  607
  
    
<?php


  		




  608
  608
  
    
		if ($cainternal == "YES"):


  		




  609
  609
  
    
?>


  		




  610
  
  
    
							<a href="system_crlmanager.php?act=new&amp;caref=<?=$ca['refid']; ?>" class="btn btn-xs btn-success" usepost>


  		




  
  610
  
    
							<a href="system_crlmanager.php?act=new&amp;caref=<?=$ca['refid']; ?>" class="btn btn-xs btn-success">


  		




  611
  611
  
    
								<i class="fa fa-plus icon-embed-btn"></i>


  		




  612
  612
  
    
								<?=gettext("Add or Import CRL")?>


  		




  613
  613
  
    
							</a>


  		




  614
  614
  
    
<?php


  		




  615
  615
  
    
		else:


  		




  616
  616
  
    
?>


  		




  617
  
  
    
							<a href="system_crlmanager.php?act=new&amp;caref=<?=$ca['refid']; ?>&amp;importonly=yes" class="btn btn-xs btn-success" usepost>


  		




  
  617
  
    
							<a href="system_crlmanager.php?act=new&amp;caref=<?=$ca['refid']; ?>&amp;importonly=yes" class="btn btn-xs btn-success">


  		




  618
  618
  
    
								<i class="fa fa-plus icon-embed-btn"></i>


  		




  619
  619
  
    
								<?=gettext("Add or Import CRL")?>


  		




  620
  620
  
    
							</a>


  		




  ......




  636
  636
  
    
						<td><?=($internal) ? count($tmpcrl['cert']) : "Unknown (imported)"; ?></td>


  		




  637
  637
  
    
						<td><i class="fa fa-<?=($inuse) ? "check" : "times"; ?>"></i></td>


  		




  638
  638
  
    
						<td>


  		




  639
  
  
    
							<a href="system_crlmanager.php?act=exp&amp;id=<?=$tmpcrl['refid']?>" class="fa fa-download" title="<?=gettext("Export CRL")?>" usepost></a>


  		




  
  639
  
    
							<a href="system_crlmanager.php?act=exp&amp;id=<?=$tmpcrl['refid']?>" class="fa fa-download" title="<?=gettext("Export CRL")?>" ></a>


  		




  640
  640
  
    
<?php


  		




  641
  641
  
    
				if ($internal): ?>


  		




  642
  
  
    
							<a href="system_crlmanager.php?act=edit&amp;id=<?=$tmpcrl['refid']?>" class="fa fa-pencil" title="<?=gettext("Edit CRL")?>" usepost></a>


  		




  
  642
  
    
							<a href="system_crlmanager.php?act=edit&amp;id=<?=$tmpcrl['refid']?>" class="fa fa-pencil" title="<?=gettext("Edit CRL")?>"></a>


  		




  643
  643
  
    
<?php


  		




  644
  644
  
    
				else:


  		




  645
  645
  
    
?>


  		




  646
  
  
    
							<a href="system_crlmanager.php?act=editimported&amp;id=<?=$tmpcrl['refid']?>" class="fa fa-pencil" title="<?=gettext("Edit CRL")?>" usepost></a>


  		




  
  646
  
    
							<a href="system_crlmanager.php?act=editimported&amp;id=<?=$tmpcrl['refid']?>" class="fa fa-pencil" title="<?=gettext("Edit CRL")?>"></a>


  		




  647
  647
  
    
<?php			endif;


  		




  648
  648
  
    
				if (!$inuse):


  		




  649
  649
  
    
?>


  		












Also available in:  Unified diff