summaryrefslogtreecommitdiffstats
path: root/etc/inc/auth.inc
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2013-07-02 16:54:25 -0400
committerjim-p <jimp@pfsense.org>2013-07-02 16:58:07 -0400
commitfa087612240405ea54db61544e7e4ed3373f4d24 (patch)
treec433fa3ab3e27ef4bf531041f5dbe2cc33162e82 /etc/inc/auth.inc
parentbcafa618a41aa23e943ad4bf996fa487911d1bb5 (diff)
downloadpfsense-fa087612240405ea54db61544e7e4ed3373f4d24.zip
pfsense-fa087612240405ea54db61544e7e4ed3373f4d24.tar.gz
Include RFC2136 hosts in DNS rebinding checks.
Diffstat (limited to 'etc/inc/auth.inc')
-rw-r--r--etc/inc/auth.inc7
1 files changed, 7 insertions, 0 deletions
diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc
index afddc5b..67451a2 100644
--- a/etc/inc/auth.inc
+++ b/etc/inc/auth.inc
@@ -86,6 +86,13 @@ if (function_exists("display_error_form") && !isset($config['system']['webgui'][
break;
}
+ if(is_array($config['dnsupdates']['dnsupdate']) && !$found_host)
+ foreach($config['dnsupdates']['dnsupdate'] as $rfc2136)
+ if(strcasecmp($rfc2136['host'], $http_host) == 0) {
+ $found_host = true;
+ break;
+ }
+
if(!empty($config['system']['webgui']['althostnames']) && !$found_host) {
$althosts = explode(" ", $config['system']['webgui']['althostnames']);
foreach ($althosts as $ah)
OpenPOWER on IntegriCloud