summaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorErik Fonnesbeck <efonnes@gmail.com>2010-11-14 04:05:40 -0700
committerErik Fonnesbeck <efonnes@gmail.com>2010-11-14 04:05:40 -0700
commit0aa72c108dd7d15f9bac62bf22eef0924c717b0d (patch)
tree3004389ae69c04f73ab5d0e2e99b25bf5e034d9f /etc/inc
parent0532e54d93b12be7da1bc68dea88f53f07bd0082 (diff)
downloadpfsense-0aa72c108dd7d15f9bac62bf22eef0924c717b0d.zip
pfsense-0aa72c108dd7d15f9bac62bf22eef0924c717b0d.tar.gz
Don't perform referer check if display_error_form is not defined (captive portal), just like as is done for the DNS rebind check. Ticket #1007
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/auth.inc2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc
index 84b73dc..dbd8a3e 100644
--- a/etc/inc/auth.inc
+++ b/etc/inc/auth.inc
@@ -87,7 +87,7 @@ if (function_exists("display_error_form") && !isset($config['system']['webgui'][
}
// If the HTTP_REFERER is something other than ourselves then disallow.
-if(!$config['system']['nohttpreferercheck']) {
+if(function_exists("display_error_form") && !$config['system']['nohttpreferercheck']) {
if($_SERVER['HTTP_REFERER']) {
$found_host = false;
$hostname_me = $config['system']['hostname'] . "." . $config['system']['domain'];
OpenPOWER on IntegriCloud