diff options
author | Scott Ullrich <sullrich@pfsense.org> | 2010-07-01 17:25:17 -0400 |
---|---|---|
committer | Scott Ullrich <sullrich@pfsense.org> | 2010-07-01 17:25:17 -0400 |
commit | 1ba06f4465d3bbc42e6c05f9ebf380bf22574c36 (patch) | |
tree | 8c2767f2d2b5310220f094eef36bc5409f63b828 /etc/inc/auth.inc | |
parent | ce46b5da400edb5fcfb3f72afaa38a86459bf827 (diff) | |
download | pfsense-1ba06f4465d3bbc42e6c05f9ebf380bf22574c36.zip pfsense-1ba06f4465d3bbc42e6c05f9ebf380bf22574c36.tar.gz |
Comment what we are doing here and add the ticket #.
Diffstat (limited to 'etc/inc/auth.inc')
-rw-r--r-- | etc/inc/auth.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc index b2f3d91..f295e8b 100644 --- a/etc/inc/auth.inc +++ b/etc/inc/auth.inc @@ -49,6 +49,7 @@ require_once("config.gui.inc"); +/* DNS Binding attack prevention. http://redmine.pfsense.org/issues/708 */ if ($_SERVER['HTTP_HOST'] != $config['system']['hostname'] . "." . $config['system']['domain'] and $_SERVER['HTTP_HOST'] != $_SERVER['SERVER_ADDR'] and $_SERVER['HTTP_HOST'] != $config['system']['hostname']) { |