diff options
| author | Erik Fonnesbeck <efonnes@gmail.com> | 2010-11-14 04:05:40 -0700 |
|---|---|---|
| committer | Erik Fonnesbeck <efonnes@gmail.com> | 2010-11-14 04:05:40 -0700 |
| commit | 0aa72c108dd7d15f9bac62bf22eef0924c717b0d (patch) | |
| tree | 3004389ae69c04f73ab5d0e2e99b25bf5e034d9f | |
| parent | 0532e54d93b12be7da1bc68dea88f53f07bd0082 (diff) | |
| download | pfsense-0aa72c108dd7d15f9bac62bf22eef0924c717b0d.zip pfsense-0aa72c108dd7d15f9bac62bf22eef0924c717b0d.tar.gz | |
Don't perform referer check if display_error_form is not defined (captive portal), just like as is done for the DNS rebind check. Ticket #1007
| -rw-r--r-- | etc/inc/auth.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc index 84b73dc..dbd8a3e 100644 --- a/etc/inc/auth.inc +++ b/etc/inc/auth.inc @@ -87,7 +87,7 @@ if (function_exists("display_error_form") && !isset($config['system']['webgui'][ } // If the HTTP_REFERER is something other than ourselves then disallow. -if(!$config['system']['nohttpreferercheck']) { +if(function_exists("display_error_form") && !$config['system']['nohttpreferercheck']) { if($_SERVER['HTTP_REFERER']) { $found_host = false; $hostname_me = $config['system']['hostname'] . "." . $config['system']['domain']; |
