Revision 5b93a1f4
Added by Jim Pingle almost 7 years ago
src/etc/inc/auth.inc | ||
---|---|---|
211 | 211 |
$found_host = true; |
212 | 212 |
} |
213 | 213 |
} |
214 |
|
|
215 |
/* Fall back to probing active interface addresses rather than config.xml to allow |
|
216 |
* changed addresses that have not yet been applied. |
|
217 |
* See https://redmine.pfsense.org/issues/8822 |
|
218 |
*/ |
|
219 |
if (!$found_host) { |
|
220 |
$refifs = get_interface_arr(); |
|
221 |
foreach ($refifs as $rif) { |
|
222 |
if (($referrer_host == find_interface_ip($rif)) || |
|
223 |
($referrer_host == find_interface_ipv6($rif)) || |
|
224 |
($referrer_host == find_interface_ipv6_ll($rif))) { |
|
225 |
$found_host = true; |
|
226 |
break; |
|
227 |
} |
|
228 |
} |
|
229 |
} |
|
214 | 230 |
} |
215 | 231 |
if ($found_host == false) { |
216 | 232 |
if (!security_checks_disabled()) { |
Also available in: Unified diff
Handle HTTP_REFERER better when changing IP addr. Fixes #8822
Fall back to probing active interface addresses rather than config.xml to allow changed addresses that have not yet been applied.