Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fixes #1874. Correctly error out when the user or the pass is not posted ↵RELENG_2_0_0 | Ermal | 2011-09-13 | 1 | -7/+10 |
| | | | | during login of CP. | ||||
* | Fix redirurl collection so after login the user can be redirected correctly | Ermal | 2011-07-21 | 1 | -4/+4 |
| | |||||
* | Plug a security risk on CP where a user can login by submitting a special ↵ | Ermal | 2011-07-21 | 1 | -1/+1 |
| | | | | request | ||||
* | Fixes #1618. Always convert the NAS_PORT value to int in php and pass the ↵ | Ermal | 2011-07-15 | 1 | -3/+3 |
| | | | | attribute type during encoding to guarantee that it is encoded as an integer. | ||||
* | Use the availble constant on php for this and also the right value that ↵ | Ermal | 2011-05-06 | 1 | -2/+2 |
| | | | | comes with it since PHP never supported u_int. There is a bug open still on PHP about bcmod but some more info is needed. | ||||
* | ipfw is not referenced here. | Ermal | 2011-03-15 | 1 | -1/+0 |
| | |||||
* | * Prevent concurrent logins on CP to not be recorded on the DB. | Ermal | 2011-03-04 | 1 | -1/+1 |
| | | | | | | | * Make the locking more complex to avoid locking exclusively during pruning task which would hurt a lot CP performance. * Retire the disconnect_client and make all the disconnect functions use the sessionid as identifier. All this was triggered by: http://forum.pfsense.org/index.php/topic,33879.0.html | ||||
* | Move all functions from index.php for captiveportal.inc | lgcosta | 2011-02-22 | 1 | -406/+0 |
| | |||||
* | Handle PORTAL_REDIRURL variable | Scott Ullrich | 2011-01-25 | 1 | -0/+6 |
| | |||||
* | Ticket #836 Ticket #1194 and ↵ | Ermal | 2011-01-18 | 1 | -3/+3 |
| | | | | http://forum.pfsense.org/index.php/topic,32175.msg166263.html#msg166263 suggest that now that CP actions are quite fast its better to send the logout data before actually disconnecting the client. | ||||
* | Ticket #1013. Force NAS_PORT to be of type integer to avoid it being ↵ | Ermal | 2011-01-10 | 2 | -4/+4 |
| | | | | interpreted as char and generate wrong radius packet. | ||||
* | Ticket #1128. Ooops pass the right parameter to unlock. | Ermal | 2010-12-23 | 1 | -1/+1 |
| | |||||
* | Nuke trailing carriage returns | Scott Ullrich | 2010-12-22 | 3 | -3/+3 |
| | |||||
* | Make the CP locking more granular and make use correctly of exclusive/shared ↵ | Ermal | 2010-12-22 | 1 | -27/+9 |
| | | | | locks where appripriate. This speeds up CP login process. | ||||
* | Ticket #868. Add Connection: close to the header to be proxy friendly. See ↵ | Ermal | 2010-10-18 | 1 | -0/+1 |
| | | | | http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html for reference. | ||||
* | Separate this control structure from the one before it, change the order, ↵ | Erik Fonnesbeck | 2010-09-25 | 1 | -4/+9 |
| | | | | and rename the function. | ||||
* | Add an option for allowing clients to pass through the captive portal a ↵ | Erik Fonnesbeck | 2010-09-24 | 1 | -1/+93 |
| | | | | limited number of times before requiring login. | ||||
* | Restore this code so the redirect after logging into the captive portal will ↵ | Erik Fonnesbeck | 2010-09-24 | 1 | -0/+2 |
| | | | | work again. Ticket #918 | ||||
* | Do not overwrite the redirurl parameter already taken care of. | Ermal | 2010-09-15 | 1 | -6/+5 |
| | |||||
* | Remove ORIGINAL_PORTAL_IP option. Never did get it working correctly. | Scott Ullrich | 2010-08-24 | 1 | -6/+1 |
| | |||||
* | Fixes #821. Force usage of configured redirurl when one has been configured. | Ermal | 2010-08-11 | 1 | -27/+28 |
| | |||||
* | clarify text | Chris Buechler | 2010-07-28 | 1 | -1/+1 |
| | |||||
* | Pull in RADIUS reply messages for logout page. | jim-p | 2010-07-15 | 1 | -0/+5 |
| | |||||
* | Use the configured src ip attribute choosen for accounting too. | Ermal | 2010-06-17 | 1 | -1/+5 |
| | |||||
* | Show even VIP's in the list. This is copied from nat code and probably ↵ | Ermal | 2010-06-17 | 1 | -6/+9 |
| | | | | should be generalized. | ||||
* | Do not assume WAN as the default interface to get the ip from for the ↵ | Ermal | 2010-06-17 | 1 | -1/+1 |
| | | | | calling station id. Instead add a select box(list) to choose the interface(ip) to send to radius. | ||||
* | Provide a default error message on error pages if there is none provided by ↵ | Ermal | 2010-06-01 | 1 | -7/+9 |
| | | | | other means. | ||||
* | Add forgotten newlines. | Ermal | 2010-06-01 | 1 | -2/+2 |
| | |||||
* | Do not overwrite previous rules. | Ermal | 2010-06-01 | 1 | -1/+1 |
| | |||||
* | Free ipfw ruleno so it can be reused. Propperly delete passthrough mac ↵ | Ermal | 2010-06-01 | 1 | -0/+8 |
| | | | | entries that are not used. | ||||
* | Use correct array to iterate. | Ermal | 2010-06-01 | 1 | -1/+1 |
| | |||||
* | Use REQUEST to hanle both POST/GET. | Ermal | 2010-05-28 | 1 | -1/+1 |
| | |||||
* | Make the logout page configurable like the other pages. The only difference ↵ | Ermal | 2010-05-28 | 1 | -31/+1 |
| | | | | is that this page/code will be treated as a .php page so it may contain internal php CP variables referenced. | ||||
* | Provide an error message to the call. | Ermal | 2010-05-28 | 1 | -1/+1 |
| | |||||
* | Some configurations want to be able to ask users about replacing their ↵ | Ermal | 2010-05-28 | 1 | -5/+24 |
| | | | | existing mac during auto mac passthrough logins if they change equipment. Allow this in the backend by requiring the user to need posting a replacemacpassthru field with the post. Also add the possibility to send back with a portal_reply_page generated page the username and password posted. | ||||
* | Add the username to the auto added mac passthrough entry. Add an option to ↵ | Ermal | 2010-05-28 | 1 | -1/+14 |
| | | | | services->captiveportal page to activate/deactivate the auto-saving of username with the auto added mac passthrough. | ||||
* | Do comparions as meant not assignment. Pointy-hat: Myself | Ermal | 2010-05-28 | 1 | -1/+1 |
| | |||||
* | Actually send the wan ip address as calledstationid as advertised on ↵ | Ermal | 2010-05-25 | 1 | -4/+4 |
| | | | | captiveportal configuration page. The same fix was previously done to radius authentication code. | ||||
* | Use url_redirection even on successful login case if present. Add a redir ↵ | Ermal | 2010-05-24 | 1 | -9/+13 |
| | | | | functionality to portal_reply_page to keep the code centralized. | ||||
* | Actually use the radius WISPr(4) attribute 'url_redirection' when present. | Ermal | 2010-05-24 | 1 | -1/+7 |
| | |||||
* | Actually match the description and send the wan interface ip as ↵ | Ermal | 2010-05-24 | 1 | -8/+6 |
| | | | | Called-Station-Id on default settings. | ||||
* | Actually use the radius WISPr(4) attribute 'url_redirection' if present. | Ermal | 2010-05-24 | 1 | -4/+4 |
| | |||||
* | Do not allow nonstop redirects to self | Scott Ullrich | 2010-05-21 | 1 | -1/+1 |
| | |||||
* | Move get_include_contents function to pfsense-utils.inc | Scott Ullrich | 2010-05-21 | 1 | -10/+0 |
| | |||||
* | Allow php code to be included in the primary captive portal page. Add new ↵ | Scott Ullrich | 2010-05-21 | 1 | -7/+32 |
| | | | | ORIGINAL_PORTAL_IP post item which will be experimenting with a master mutli voucher setup. | ||||
* | Add a global declaration. | Ermal | 2010-05-19 | 1 | -2/+2 |
| | |||||
* | Improve/correct the passthrumac rules when this option is enabled. | Ermal | 2010-05-05 | 1 | -182/+176 |
| | |||||
* | Ticket #565. Correct deleting passthru mac entries. revert back to always ↵ | Ermal | 2010-05-03 | 1 | -15/+1 |
| | | | | allow a passthru mac as with allowed ips. Remove the check during login for passthru mac entries they will never make it to the login page. | ||||
* | fix up text | Chris Buechler | 2010-05-01 | 1 | -1/+1 |
| | |||||
* | Warn the user when we cannot get the MAC address on pass through auto add ↵ | Ermal | 2010-04-20 | 1 | -1/+3 |
| | | | | case. Also when a user does a logout through clicking the logout form exit after showing sending info on logout successful. |