From 921406213ffc27ef3806500694c27b3c767e4e00 Mon Sep 17 00:00:00 2001
From: Ermal <eri@pfsense.org>
Date: Tue, 20 Apr 2010 21:14:25 +0000
Subject: Allow users to send in the same POST authentication info and post
 fields. This will be allowed by authentication code if the special post var
 'postafterlogin' isset.

---
 etc/inc/auth.inc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc
index 908b380..c1a9ba5 100644
--- a/etc/inc/auth.inc
+++ b/etc/inc/auth.inc
@@ -1086,7 +1086,10 @@ function session_auth() {
 			$_SESSION['last_access'] = time();
 			log_error("Successful login for user '{$_POST['usernamefld']}' from: {$_SERVER['REMOTE_ADDR']}");
 			require_once("functions.inc");
-			pfSenseHeader("/{$page}");
+			if (isset($_POST['postafterlogin']))
+				return true;
+			else
+				pfSenseHeader("/{$page}");
 		} else {
 			/* give the user an error message */
 			$_SESSION['Login_Error'] = "Username or Password incorrect";
-- 
cgit v1.1