summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Only include a scheduled rule if it is strictly before the end timeRELENG_2_1_4Phil Davis2014-06-201-1/+1
* Remove extra data after space and fix pf rule syntax. It should fix #3688Renato Botelho2014-06-201-1/+1
* Merge pull request #1208 from razzfazz/nat_add_missing_protocolsRenato Botelho2014-06-201-1/+1
|\
| * bring protocols on NAT edit page more in line with rule edit pageDaniel Becker2014-05-221-1/+1
* | Remove also . and / from graphRenato Botelho2014-06-191-1/+1
* | Fix status_rrd_graph_img.php and also improve it:Renato Botelho2014-06-191-36/+37
* | Make sure single quotes are encoded and avoid javascript injectionRenato Botelho2014-06-191-2/+2
* | Use CDATA for javascriptRenato Botelho2014-06-191-3/+3
* | Fix indent and whitespacesRenato Botelho2014-06-191-6/+7
* | Simplify logic, add some protection to user input parametersRenato Botelho2014-06-181-27/+23
* | Fix whitespaces and indentRenato Botelho2014-06-181-46/+45
* | We need to allow subdirectories under /usr/local/pkg, here is the proper fixRenato Botelho2014-06-181-7/+5
* | Set 'Disable webConfigurator login autocomplete' as on by defaultRenato Botelho2014-06-181-0/+1
* | Always set httponly attribute on cookiesRenato Botelho2014-06-181-10/+8
* | Protect servicestatusfilter parameter with htmlspecialchars()Renato Botelho2014-06-171-1/+1
* | Protect rssfeed parameters with htmlspecialchars()Renato Botelho2014-06-171-6/+6
* | Add comment I forgot on last commitRenato Botelho2014-06-171-0/+1
* | Re-generate session ID on a successful login to avoid session fixationRenato Botelho2014-06-171-0/+1
* | Avoid directory traversal on restorefullbackupRenato Botelho2014-06-171-2/+2
* | Fix core dump on viewing invalid package logMatt Smith2014-06-172-3/+7
* | Remove . and / from pkg name to avoid directory traversalRenato Botelho2014-06-171-5/+5
* | Remove id=0 from miniupnpd menu and shortcutRenato Botelho2014-06-172-3/+3
* | Avoid directory traversal when reading package xml files, also check if file ...Renato Botelho2014-06-171-1/+6
* | Make sure variables are escaped, also replace exec calls to run rm by unlink_...Renato Botelho2014-06-171-4/+4
* | Remove useless code, variable is set again on next lineRenato Botelho2014-06-171-3/+0
* | Escape parameters passed to shell_exec()Renato Botelho2014-06-172-2/+2
* | Be more careful with host parameter and make sure it's escaped when call shel...Renato Botelho2014-06-171-7/+6
* | Validate starttime and stoptime formatRenato Botelho2014-06-171-0/+8
* | Do not expire already disabled users, it fixes #3644Renato Botelho2014-06-121-1/+1
* | Be more precise to match members of a bridge interface, it should fix #3637Renato Botelho2014-06-101-1/+3
* | Revert "Revert "Fix #3700 and other syntax issues:""Renato Botelho2014-06-102-16/+17
* | Revert "Fix sh syntax"Renato Botelho2014-06-101-3/+3
* | Fix sh syntaxRenato Botelho2014-06-101-3/+3
* | Revert "Fix #3700 and other syntax issues:"Renato Botelho2014-06-102-17/+16
* | Fix #3700 and other syntax issues:Renato Botelho2014-06-102-16/+17
* | Do not allow interface group name to be bigger than 15 chars, helps ticket #3208Renato Botelho2014-06-091-1/+1
* | Escape argument on call to is_process_running too, also remove some unecessar...Renato Botelho2014-06-061-3/+3
* | Add some protection to parameters that come through _GETRenato Botelho2014-06-062-13/+17
* | Escape this before running.jim-p2014-06-061-1/+1
* | Bump version to 2.1.4Renato Botelho2014-06-051-1/+1
* | Fix #3691, use curl instead of fetch to download update filesRenato Botelho2014-06-051-17/+13
* | allow ipaliases to be configured on lo0Matt Smith2014-06-031-2/+2
* | remove openbgpd bits from system_gateways_edit and system.inc. The packageChris Buechler2014-05-302-8/+2
* | client-config-dir is also useful when using OpenVPN's internal DHCP while bri...jim-p2014-05-301-0/+1
* | Unset iflist and iflist_disabledRenato Botelho2014-05-292-1/+6
* | Show disabled interface when it was already part of interface group, it avoid...Renato Botelho2014-05-292-6/+14
* | Convert protocol ssl:// to https:// when creating http headersManuel Silvoso2014-05-281-1/+1
|/
* Properly handle this rename, and squelch errors if it fails.jim-p2014-05-211-1/+1
* Delete all ip aliases when interface is disabled, it should fix #3650Renato Botelho2014-05-211-7/+21
* fix variable typo. ticket #3669Chris Buechler2014-05-201-1/+1
OpenPOWER on IntegriCloud