summaryrefslogtreecommitdiffstats
path: root/usr/local
diff options
context:
space:
mode:
authorErmal <eri@pfsense.org>2010-09-03 11:36:59 +0000
committerErmal <eri@pfsense.org>2010-09-03 11:36:59 +0000
commit2fc2902022cece4f97352aaf413df9b6731b69ed (patch)
tree356f47ba80fae93a2e53ae29f92852085954bbfe /usr/local
parentce96805161ccd07184afb2d68c3e3d5961972337 (diff)
downloadpfsense-2fc2902022cece4f97352aaf413df9b6731b69ed.zip
pfsense-2fc2902022cece4f97352aaf413df9b6731b69ed.tar.gz
Base64 encode passowrd fields for safer operations. Suggested-by: Efonne(IRC)
Diffstat (limited to 'usr/local')
-rwxr-xr-xusr/local/www/vpn_pppoe_edit.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/usr/local/www/vpn_pppoe_edit.php b/usr/local/www/vpn_pppoe_edit.php
index be28b04..39de7fb 100755
--- a/usr/local/www/vpn_pppoe_edit.php
+++ b/usr/local/www/vpn_pppoe_edit.php
@@ -203,7 +203,7 @@ if ($_POST) {
$users = array();
for($x=0; $x<4999; $x++) {
if ($_POST["username{$x}"]) {
- $usernam = $_POST["username{$x}"] . ":" . $_POST["password{$x}"];
+ $usernam = $_POST["username{$x}"] . ":" . base64_encode($_POST["password{$x}"]);
if ($_POST["ip{$x}"])
$usernam .= ":" . $_POST["ip{$x}"];
$users[] = $usernam;
@@ -539,7 +539,7 @@ function enable_change(enable_over) {
foreach($item as $ww) {
$wws = explode(":", $ww);
$user = $wws[0];
- $passwd = $wws[1];
+ $passwd = base64_decode($wws[1]);
$ip = $wws[2];
$tracker = $counter;
?>
OpenPOWER on IntegriCloud