summaryrefslogtreecommitdiffstats
path: root/src/usr/local/www/services_captiveportal_vouchers.php
diff options
context:
space:
mode:
authorStephen Beaver <sbeaver@netgate.com>2015-12-28 16:59:54 -0500
committerStephen Beaver <sbeaver@netgate.com>2015-12-28 16:59:54 -0500
commit76d6d92535ad26d2b951a433658d5de62c62a15f (patch)
treef281570f1c8acc7d6a7db326efedf36130eae98c /src/usr/local/www/services_captiveportal_vouchers.php
parentc8b10b4ce59161e21a93786d04237ad3f330178a (diff)
downloadpfsense-76d6d92535ad26d2b951a433658d5de62c62a15f.zip
pfsense-76d6d92535ad26d2b951a433658d5de62c62a15f.tar.gz
FInished password hiding logic by ensuring $_POST['password'] != DMYPWD before updating
Diffstat (limited to 'src/usr/local/www/services_captiveportal_vouchers.php')
-rw-r--r--src/usr/local/www/services_captiveportal_vouchers.php4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/usr/local/www/services_captiveportal_vouchers.php b/src/usr/local/www/services_captiveportal_vouchers.php
index 39f62fc..46a6104 100644
--- a/src/usr/local/www/services_captiveportal_vouchers.php
+++ b/src/usr/local/www/services_captiveportal_vouchers.php
@@ -316,7 +316,9 @@ if ($_POST) {
$newvoucher['vouchersyncdbip'] = $_POST['vouchersyncdbip'];
$newvoucher['vouchersyncport'] = $_POST['vouchersyncport'];
$newvoucher['vouchersyncusername'] = $_POST['vouchersyncusername'];
- $newvoucher['vouchersyncpass'] = $_POST['vouchersyncpass'];
+ if ($_POST['vouchersyncpass'] != DMYPWD ) {
+ $newvoucher['vouchersyncpass'] = $_POST['vouchersyncpass'];
+ }
if ($newvoucher['vouchersyncpass'] && $newvoucher['vouchersyncusername'] &&
$newvoucher['vouchersyncport'] && $newvoucher['vouchersyncdbip']) {
// Synchronize the voucher DB from the master node
OpenPOWER on IntegriCloud