summaryrefslogtreecommitdiffstats
path: root/usr/local/captiveportal
Commit message (Collapse)AuthorAgeFilesLines
* Fix redirurl collection so after login the user can be redirected correctlyErmal2011-07-211-4/+4
|
* Plug a security risk on CP where a user can login by submitting a special ↵Ermal2011-07-211-1/+1
| | | | request
* Fixes #1618. Always convert the NAS_PORT value to int in php and pass the ↵Ermal2011-07-151-3/+3
| | | | attribute type during encoding to guarantee that it is encoded as an integer.
* Use the availble constant on php for this and also the right value that ↵Ermal2011-05-061-2/+2
| | | | comes with it since PHP never supported u_int. There is a bug open still on PHP about bcmod but some more info is needed.
* ipfw is not referenced here.Ermal2011-03-151-1/+0
|
* * Prevent concurrent logins on CP to not be recorded on the DB.Ermal2011-03-041-1/+1
| | | | | | | * Make the locking more complex to avoid locking exclusively during pruning task which would hurt a lot CP performance. * Retire the disconnect_client and make all the disconnect functions use the sessionid as identifier. All this was triggered by: http://forum.pfsense.org/index.php/topic,33879.0.html
* Move all functions from index.php for captiveportal.inclgcosta2011-02-221-406/+0
|
* Handle PORTAL_REDIRURL variableScott Ullrich2011-01-251-0/+6
|
* Ticket #836 Ticket #1194 and ↵Ermal2011-01-181-3/+3
| | | | http://forum.pfsense.org/index.php/topic,32175.msg166263.html#msg166263 suggest that now that CP actions are quite fast its better to send the logout data before actually disconnecting the client.
* Ticket #1013. Force NAS_PORT to be of type integer to avoid it being ↵Ermal2011-01-102-4/+4
| | | | interpreted as char and generate wrong radius packet.
* Ticket #1128. Ooops pass the right parameter to unlock.Ermal2010-12-231-1/+1
|
* Nuke trailing carriage returnsScott Ullrich2010-12-223-3/+3
|
* Make the CP locking more granular and make use correctly of exclusive/shared ↵Ermal2010-12-221-27/+9
| | | | locks where appripriate. This speeds up CP login process.
* Ticket #868. Add Connection: close to the header to be proxy friendly. See ↵Ermal2010-10-181-0/+1
| | | | http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html for reference.
* Separate this control structure from the one before it, change the order, ↵Erik Fonnesbeck2010-09-251-4/+9
| | | | and rename the function.
* Add an option for allowing clients to pass through the captive portal a ↵Erik Fonnesbeck2010-09-241-1/+93
| | | | limited number of times before requiring login.
* Restore this code so the redirect after logging into the captive portal will ↵Erik Fonnesbeck2010-09-241-0/+2
| | | | work again. Ticket #918
* Do not overwrite the redirurl parameter already taken care of.Ermal2010-09-151-6/+5
|
* Remove ORIGINAL_PORTAL_IP option. Never did get it working correctly.Scott Ullrich2010-08-241-6/+1
|
* Fixes #821. Force usage of configured redirurl when one has been configured.Ermal2010-08-111-27/+28
|
* clarify textChris Buechler2010-07-281-1/+1
|
* Pull in RADIUS reply messages for logout page.jim-p2010-07-151-0/+5
|
* Use the configured src ip attribute choosen for accounting too.Ermal2010-06-171-1/+5
|
* Show even VIP's in the list. This is copied from nat code and probably ↵Ermal2010-06-171-6/+9
| | | | should be generalized.
* Do not assume WAN as the default interface to get the ip from for the ↵Ermal2010-06-171-1/+1
| | | | calling station id. Instead add a select box(list) to choose the interface(ip) to send to radius.
* Provide a default error message on error pages if there is none provided by ↵Ermal2010-06-011-7/+9
| | | | other means.
* Add forgotten newlines.Ermal2010-06-011-2/+2
|
* Do not overwrite previous rules.Ermal2010-06-011-1/+1
|
* Free ipfw ruleno so it can be reused. Propperly delete passthrough mac ↵Ermal2010-06-011-0/+8
| | | | entries that are not used.
* Use correct array to iterate.Ermal2010-06-011-1/+1
|
* Use REQUEST to hanle both POST/GET.Ermal2010-05-281-1/+1
|
* Make the logout page configurable like the other pages. The only difference ↵Ermal2010-05-281-31/+1
| | | | is that this page/code will be treated as a .php page so it may contain internal php CP variables referenced.
* Provide an error message to the call.Ermal2010-05-281-1/+1
|
* Some configurations want to be able to ask users about replacing their ↵Ermal2010-05-281-5/+24
| | | | existing mac during auto mac passthrough logins if they change equipment. Allow this in the backend by requiring the user to need posting a replacemacpassthru field with the post. Also add the possibility to send back with a portal_reply_page generated page the username and password posted.
* Add the username to the auto added mac passthrough entry. Add an option to ↵Ermal2010-05-281-1/+14
| | | | services->captiveportal page to activate/deactivate the auto-saving of username with the auto added mac passthrough.
* Do comparions as meant not assignment. Pointy-hat: MyselfErmal2010-05-281-1/+1
|
* Actually send the wan ip address as calledstationid as advertised on ↵Ermal2010-05-251-4/+4
| | | | captiveportal configuration page. The same fix was previously done to radius authentication code.
* Use url_redirection even on successful login case if present. Add a redir ↵Ermal2010-05-241-9/+13
| | | | functionality to portal_reply_page to keep the code centralized.
* Actually use the radius WISPr(4) attribute 'url_redirection' when present.Ermal2010-05-241-1/+7
|
* Actually match the description and send the wan interface ip as ↵Ermal2010-05-241-8/+6
| | | | Called-Station-Id on default settings.
* Actually use the radius WISPr(4) attribute 'url_redirection' if present.Ermal2010-05-241-4/+4
|
* Do not allow nonstop redirects to selfScott Ullrich2010-05-211-1/+1
|
* Move get_include_contents function to pfsense-utils.incScott Ullrich2010-05-211-10/+0
|
* Allow php code to be included in the primary captive portal page. Add new ↵Scott Ullrich2010-05-211-7/+32
| | | | ORIGINAL_PORTAL_IP post item which will be experimenting with a master mutli voucher setup.
* Add a global declaration.Ermal2010-05-191-2/+2
|
* Improve/correct the passthrumac rules when this option is enabled.Ermal2010-05-051-182/+176
|
* Ticket #565. Correct deleting passthru mac entries. revert back to always ↵Ermal2010-05-031-15/+1
| | | | allow a passthru mac as with allowed ips. Remove the check during login for passthru mac entries they will never make it to the login page.
* fix up textChris Buechler2010-05-011-1/+1
|
* Warn the user when we cannot get the MAC address on pass through auto add ↵Ermal2010-04-201-1/+3
| | | | case. Also when a user does a logout through clicking the logout form exit after showing sending info on logout successful.
* Use tables of ipfw for passthrough mac entries. This makes it scale way ↵Ermal2010-04-201-26/+23
| | | | better than previously. Fix multiple entries on adding mac through entries automatically after login for the same user. The changes allow even pass through mac to be controlled from the Status->Captiveportal. Use serialize/unserialize on some files that keep temporary information to speed up calculations. Really allow mac passthrough to follow radius rules or time out rules when present.
OpenPOWER on IntegriCloud