summaryrefslogtreecommitdiffstats
path: root/src/usr/local/www/vpn_l2tp.php
diff options
context:
space:
mode:
authorStephen Beaver <sbeaver@netgate.com>2015-12-28 16:59:54 -0500
committerStephen Beaver <sbeaver@netgate.com>2015-12-28 16:59:54 -0500
commit76d6d92535ad26d2b951a433658d5de62c62a15f (patch)
treef281570f1c8acc7d6a7db326efedf36130eae98c /src/usr/local/www/vpn_l2tp.php
parentc8b10b4ce59161e21a93786d04237ad3f330178a (diff)
downloadpfsense-76d6d92535ad26d2b951a433658d5de62c62a15f.zip
pfsense-76d6d92535ad26d2b951a433658d5de62c62a15f.tar.gz
FInished password hiding logic by ensuring $_POST['password'] != DMYPWD before updating
Diffstat (limited to 'src/usr/local/www/vpn_l2tp.php')
-rw-r--r--src/usr/local/www/vpn_l2tp.php10
1 files changed, 8 insertions, 2 deletions
diff --git a/src/usr/local/www/vpn_l2tp.php b/src/usr/local/www/vpn_l2tp.php
index 04a8990..092a0ba 100644
--- a/src/usr/local/www/vpn_l2tp.php
+++ b/src/usr/local/www/vpn_l2tp.php
@@ -158,8 +158,14 @@ if ($_POST) {
$l2tpcfg['interface'] = $_POST['interface'];
$l2tpcfg['n_l2tp_units'] = $_POST['n_l2tp_units'];
$l2tpcfg['radius']['server'] = $_POST['radiusserver'];
- $l2tpcfg['radius']['secret'] = $_POST['radiussecret'];
- $l2tpcfg['secret'] = $_POST['secret'];
+ if ($_POST['radiussecret'] != DMYPWD) {
+ $l2tpcfg['radius']['secret'] = $_POST['radiussecret'];
+ }
+
+ if ($_POST['secret'] != DMYPWD) {
+ $l2tpcfg['secret'] = $_POST['secret'];
+ }
+
$l2tpcfg['paporchap'] = $_POST['paporchap'];
OpenPOWER on IntegriCloud