diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2006-03-10 21:20:43 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2006-03-10 21:20:43 +0000 |
| commit | abfa59108e442f3f591583442ae394fd5478c860 (patch) | |
| tree | f47a249c2b6122b763f11176ca777d11ce296591 /usr/local/www/sajax | |
| parent | 4742e9273c56edbe9485e29c234f3da6ff9e5327 (diff) | |
| download | pfsense-abfa59108e442f3f591583442ae394fd5478c860.zip pfsense-abfa59108e442f3f591583442ae394fd5478c860.tar.gz | |
MFC 10173
Make sajax authenticate caller - this was only a possible information
disclosure bug (sajax is only used for index.php updates currently)
Diffstat (limited to 'usr/local/www/sajax')
| -rwxr-xr-x | usr/local/www/sajax/index.sajax.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/usr/local/www/sajax/index.sajax.php b/usr/local/www/sajax/index.sajax.php index 7652536..8be40ab 100755 --- a/usr/local/www/sajax/index.sajax.php +++ b/usr/local/www/sajax/index.sajax.php @@ -3,6 +3,7 @@ if(Connection_Aborted()) { exit; } + require_once("auth.inc"); require("../includes/sajax.class.php"); require("../includes/functions.inc.php"); @@ -10,4 +11,4 @@ $oSajax = new sajax(); $oSajax->sajax_export("get_stats"); $oSajax->sajax_handle_client_request(); -?>
\ No newline at end of file +?> |
