summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2014-09-11 20:25:54 +0200
committerErmal <eri@pfsense.org>2014-09-11 20:25:54 +0200
commitbb55330aca91eb556df4ab7a21fe42d1d7899f8e (patch)
tree53b991389fe47ae3a999009147b904411300a790
parenteb18386310e08457b69b443e764a5e3a2813b24b (diff)
downloadpfsense-bb55330aca91eb556df4ab7a21fe42d1d7899f8e.zip
pfsense-bb55330aca91eb556df4ab7a21fe42d1d7899f8e.tar.gz
Do not let the user mess with SAs from this page. The daemon and primary status page handles tat
-rw-r--r--usr/local/www/diag_ipsec_sad.php19
1 files changed, 0 insertions, 19 deletions
diff --git a/usr/local/www/diag_ipsec_sad.php b/usr/local/www/diag_ipsec_sad.php
index f47a538..d2e4372 100644
--- a/usr/local/www/diag_ipsec_sad.php
+++ b/usr/local/www/diag_ipsec_sad.php
@@ -52,16 +52,6 @@ include("head.inc");
$sad = ipsec_dump_sad();
-/* delete any SA? */
-if ($_GET['act'] == "del") {
- $fd = @popen("/sbin/setkey -c > /dev/null 2>&1", "w");
- if ($fd) {
- fwrite($fd, "delete {$_GET['src']} {$_GET['dst']} {$_GET['proto']} {$_GET['spi']} ;\n");
- pclose($fd);
- sleep(1);
- }
-}
-
?>
<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
@@ -105,15 +95,6 @@ if ($_GET['act'] == "del") {
<td class="listr"><?=htmlspecialchars($sa['aalgo']);?></td>
<td class="listr"><?=htmlspecialchars($sa['data']);?></td>
<td class="list nowrap">
- <?php
- $args = "src=" . rawurlencode($sa['src']);
- $args .= "&amp;dst=" . rawurlencode($sa['dst']);
- $args .= "&amp;proto=" . rawurlencode($sa['proto']);
- $args .= "&amp;spi=" . rawurlencode("0x" . $sa['spi']);
- ?>
- <a href="diag_ipsec_sad.php?act=del&amp;<?=$args;?>" onclick="return confirm('<?=gettext("Do you really want to delete this security association?"); ?>')">
- <img src="/themes/<?= $g['theme']; ?>/images/icons/icon_x.gif" width="17" height="17" border="0" alt="delete" />
- </a>
</td>
</tr>
<?php endforeach; ?>
OpenPOWER on IntegriCloud