diff options
| author | Stephen Beaver <sbeaver@netgate.com> | 2015-12-28 16:59:54 -0500 |
|---|---|---|
| committer | Stephen Beaver <sbeaver@netgate.com> | 2015-12-28 16:59:54 -0500 |
| commit | 76d6d92535ad26d2b951a433658d5de62c62a15f (patch) | |
| tree | f281570f1c8acc7d6a7db326efedf36130eae98c /src/usr/local/www/diag_backup.php | |
| parent | c8b10b4ce59161e21a93786d04237ad3f330178a (diff) | |
| download | pfsense-76d6d92535ad26d2b951a433658d5de62c62a15f.zip pfsense-76d6d92535ad26d2b951a433658d5de62c62a15f.tar.gz | |
FInished password hiding logic by ensuring $_POST['password'] != DMYPWD before updating
Diffstat (limited to 'src/usr/local/www/diag_backup.php')
| -rw-r--r-- | src/usr/local/www/diag_backup.php | 14 |
1 files changed, 4 insertions, 10 deletions
diff --git a/src/usr/local/www/diag_backup.php b/src/usr/local/www/diag_backup.php index 173da92..074ae28 100644 --- a/src/usr/local/www/diag_backup.php +++ b/src/usr/local/www/diag_backup.php @@ -225,12 +225,9 @@ if ($_POST) { if ($mode) { if ($mode == "download") { if ($_POST['encrypt']) { - if (!$_POST['encrypt_password'] || !$_POST['encrypt_password_confirm']) { + if (!$_POST['encrypt_password']) { $input_errors[] = gettext("You must supply and confirm the password for encryption."); } - if ($_POST['encrypt_password'] != $_POST['encrypt_password_confirm']) { - $input_errors[] = gettext("The supplied 'Password' and 'Confirm' field values must match."); - } } if (!$input_errors) { @@ -303,12 +300,9 @@ if ($_POST) { if ($mode == "restore") { if ($_POST['decrypt']) { - if (!$_POST['decrypt_password'] || !$_POST['decrypt_password_confirm']) { + if (!$_POST['decrypt_password']) { $input_errors[] = gettext("You must supply and confirm the password for decryption."); } - if ($_POST['decrypt_password'] != $_POST['decrypt_password_confirm']) { - $input_errors[] = gettext("The supplied 'Password' and 'Confirm' field values must match."); - } } if (!$input_errors) { @@ -659,7 +653,7 @@ $section->addInput(new Form_Checkbox( false )); -$section->addPassword(new Form_Input( +$section->addInput(new Form_Input( 'encrypt_password', 'Password', 'password', @@ -703,7 +697,7 @@ $section->addInput(new Form_Checkbox( false )); -$section->addPassword(new Form_Input( +$section->addInput(new Form_Input( 'decrypt_password', 'Password', 'password', |
