diff options
| author | Ermal LUÇI <eri@pfsense.org> | 2015-01-10 22:17:28 +0100 |
|---|---|---|
| committer | Ermal LUÇI <eri@pfsense.org> | 2015-01-10 22:17:28 +0100 |
| commit | e821f30e7dd50285cf0c590d205409bb53cf3d6a (patch) | |
| tree | 7f894730e004cd2a85375c43f59883438efba51f /etc/inc/openvpn.auth-user.php | |
| parent | 60370eb98f6bbda2257fddc7594df0fc983a52db (diff) | |
| download | pfsense-e821f30e7dd50285cf0c590d205409bb53cf3d6a.zip pfsense-e821f30e7dd50285cf0c590d205409bb53cf3d6a.tar.gz | |
Fixes #4177 convert password to base64 to be submitted to avoid issues with special chars in shell and HTTP GET parameter passing. Probably should add POST support to fcgicli.
Diffstat (limited to 'etc/inc/openvpn.auth-user.php')
| -rw-r--r-- | etc/inc/openvpn.auth-user.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/openvpn.auth-user.php b/etc/inc/openvpn.auth-user.php index b7be6ac..3f199e3 100644 --- a/etc/inc/openvpn.auth-user.php +++ b/etc/inc/openvpn.auth-user.php @@ -85,7 +85,7 @@ openlog("openvpn", LOG_ODELAY, LOG_AUTH); if (isset($_GET)) { $authmodes = explode(",", $_GET['authcfg']); $username = $_GET['username']; - $password = urldecode($_GET['password']); + $password = base64_decode(str_replace('%3D', '=', $_GET['password'])); $common_name = $_GET['cn']; $modeid = $_GET['modeid']; $strictusercn = $_GET['strictcn'] == "false" ? false : true; |
