github/openNDS
1
1
Fork 0
mirror of https://github.com/openNDS/openNDS.git synced 2026-05-04 03:01:32 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #397 from nodogsplash/fix-redir

Browse Source 
Fix coding error in fas-aes.php incorrectly passing redir back to NDS
This commit is contained in:
Rob White
2019-07-27 17:22:24 +01:00
committed by GitHub
parent 42285ddd42 c73971af69
commit 9648b9cfbe
1 changed files with 13 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
forward_authentication_service/fas-aes/fas-aes.php
View File

@@ -106,8 +106,6 @@ if (isset($_GET["originurl"])) {
} else if (isset($_GET["terms"])) {
$gatewayname=$_GET["gatewayname"];
$terms=true;
} else {
$redir=$_SERVER["SCRIPT_URI"]."/?originurl=".urlencode($originurl);
}
// Add headers to stop browsers from cacheing
@@ -206,19 +204,28 @@ if ($fullname == "" or $email == "") {
"<br><italic-black> Your News or Advertising could be here, contact the owners of this Hotspot to find out how!</italic-black>\n".
"<form action=\"".$authaction."\" method=\"get\">\n".
"<input type=\"hidden\" name=\"tok\" value=\"".$tok."\">\n".
"<input type=\"hidden\" name=\"redir\" value=\"".$redir."\"><br>\n".
"<input type=\"hidden\" name=\"redir\" value=\"".$originurl."\"><br>\n".
"<input type=\"submit\" value=\"Continue\" >\n".
"</form><hr>\n";
read_terms($me,$gatewayname);
# In this example we have decided to log all clients who are granted access
# Note: the web server daemon must have read and write permissions to the folder defined in $logpath
# By default $logpath is null so the logfile will be written to the folder this script resides in.
$logpath="";
$log=date('d/m/Y H:i:s', $_SERVER['REQUEST_TIME'])." Username=".$fullname." emailaddress=".$email." macaddress=".$clientmac."\n";
$gwname=str_replace(" ", "_", trim($gatewayname));
$logfile=$logpath.$gwname."_log.php";
if (!file_exists($gwname."_log.php")) {
file_put_contents($gwname."_log.php", "<?php exit(0); ?>\n");
if (!file_exists($logfile)) {
@file_put_contents($logfile, "<?php exit(0); ?>\n");
}
if (is_writable($logfile)) {
file_put_contents($logfile, $log, FILE_APPEND );
}
file_put_contents($gwname."_log.php", $log, FILE_APPEND );
}
footer();