diff options
author | Ermal <eri@pfsense.org> | 2010-09-03 11:36:59 +0000 |
---|---|---|
committer | Ermal <eri@pfsense.org> | 2010-09-03 11:36:59 +0000 |
commit | 2fc2902022cece4f97352aaf413df9b6731b69ed (patch) | |
tree | 356f47ba80fae93a2e53ae29f92852085954bbfe | |
parent | ce96805161ccd07184afb2d68c3e3d5961972337 (diff) | |
download | pfsense-2fc2902022cece4f97352aaf413df9b6731b69ed.zip pfsense-2fc2902022cece4f97352aaf413df9b6731b69ed.tar.gz |
Base64 encode passowrd fields for safer operations. Suggested-by: Efonne(IRC)
-rw-r--r-- | etc/inc/upgrade_config.inc | 2 | ||||
-rwxr-xr-x | usr/local/www/vpn_pppoe_edit.php | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/etc/inc/upgrade_config.inc b/etc/inc/upgrade_config.inc index e83b0e4..60800a7 100644 --- a/etc/inc/upgrade_config.inc +++ b/etc/inc/upgrade_config.inc @@ -2167,7 +2167,7 @@ function upgrade_067_to_068() { if (is_array($config['pppoe']['user'])) { $username = array(); foreach ($config['pppoe']['user'] as $user) { - $usr = "{$user['name']}:{$user['password']}"; + $usr = $user['name'] . ":" . base64_encode($user['password']); if ($user['ip']) $usr .= ":{$user['ip']}"; $username[] = $usr; diff --git a/usr/local/www/vpn_pppoe_edit.php b/usr/local/www/vpn_pppoe_edit.php index be28b04..39de7fb 100755 --- a/usr/local/www/vpn_pppoe_edit.php +++ b/usr/local/www/vpn_pppoe_edit.php @@ -203,7 +203,7 @@ if ($_POST) { $users = array(); for($x=0; $x<4999; $x++) { if ($_POST["username{$x}"]) { - $usernam = $_POST["username{$x}"] . ":" . $_POST["password{$x}"]; + $usernam = $_POST["username{$x}"] . ":" . base64_encode($_POST["password{$x}"]); if ($_POST["ip{$x}"]) $usernam .= ":" . $_POST["ip{$x}"]; $users[] = $usernam; @@ -539,7 +539,7 @@ function enable_change(enable_over) { foreach($item as $ww) { $wws = explode(":", $ww); $user = $wws[0]; - $passwd = $wws[1]; + $passwd = base64_decode($wws[1]); $ip = $wws[2]; $tracker = $counter; ?> |