Project

General

Profile

« Previous | Next » 

Revision 5b93a1f4

Added by Jim Pingle almost 7 years ago

Handle HTTP_REFERER better when changing IP addr. Fixes #8822

Fall back to probing active interface addresses rather than config.xml to allow changed addresses that have not yet been applied.

View differences:

src/etc/inc/auth.inc
211 211
					$found_host = true;
212 212
				}
213 213
			}
214

  
215
			/* Fall back to probing active interface addresses rather than config.xml to allow
216
			 * changed addresses that have not yet been applied.
217
			 * See https://redmine.pfsense.org/issues/8822
218
			 */
219
			if (!$found_host) {
220
				$refifs = get_interface_arr();
221
				foreach ($refifs as $rif) {
222
					if (($referrer_host == find_interface_ip($rif)) ||
223
					    ($referrer_host == find_interface_ipv6($rif)) ||
224
					    ($referrer_host == find_interface_ipv6_ll($rif))) {
225
						$found_host = true;
226
						break;
227
					}
228
				}
229
			}
214 230
		}
215 231
		if ($found_host == false) {
216 232
			if (!security_checks_disabled()) {

Also available in: Unified diff