(captiveportal, new) don't let the user disconnect static entries

e8e37d0c · Ad Schellevis · 0a890241 · e8e37d0c
Commit e8e37d0c authored Oct 14, 2015 by Ad Schellevis
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletion

AccessController.php ...ntrollers/OPNsense/CaptivePortal/Api/AccessController.php +4 -1

No files found.
--- a/src/opnsense/mvc/app/controllers/OPNsense/CaptivePortal/Api/AccessController.php
+++ b/src/opnsense/mvc/app/controllers/OPNsense/CaptivePortal/Api/AccessController.php
@@ -201,7 +201,10 @@ class AccessController extends ApiControllerBase
        } else {
            $this->sessionClose();
            $clientSession = $this->clientSession((string)$zoneid);
-            if ($clientSession['clientState'] == 'AUTHORIZED') {
+            if ($clientSession['clientState'] == 'AUTHORIZED' &&
+                $clientSession['authenticated_via'] != '---ip---' &&
+                $clientSession['authenticated_via'] != '---mac---'
+            ) {
                // you can only disconnect a connected client
                $backend = new Backend();
                $statusRAW = $backend->configdpRun(