| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | | | | Fix indent and whitespaces | Renato Botelho | 2014-06-19 | 1 | -6/+7 |
| |/ /
|/| | |
|
* | | | Simplify logic, add some protection to user input parameters | Renato Botelho | 2014-06-18 | 1 | -27/+25 |
* | | | Fix whitespaces and indent | Renato Botelho | 2014-06-18 | 1 | -49/+52 |
* | | | We need to allow subdirectories under /usr/local/pkg, here is the proper fix | Renato Botelho | 2014-06-18 | 1 | -7/+5 |
* | | | Change the option for webconfig login autocomplete from opt-in to opt-out, al... | Renato Botelho | 2014-06-18 | 4 | -11/+20 |
* | | | Always set httponly attribute on cookies | Renato Botelho | 2014-06-18 | 1 | -10/+8 |
* | | | Fix syntax error | jim-p | 2014-06-17 | 1 | -1/+1 |
* | | | Protect servicestatusfilter parameter with htmlspecialchars() | Renato Botelho | 2014-06-17 | 1 | -1/+1 |
* | | | Protect rssfeed parameters with htmlspecialchars() | Renato Botelho | 2014-06-17 | 1 | -6/+6 |
* | | | Add comment I forgot on last commit | Renato Botelho | 2014-06-17 | 1 | -0/+1 |
* | | | Re-generate session ID on a successful login to avoid session fixation | Renato Botelho | 2014-06-17 | 1 | -0/+1 |
* | | | Avoid directory traversal on restorefullbackup | Renato Botelho | 2014-06-17 | 1 | -2/+2 |
* | | | Fix core dump on viewing invalid package log | Matt Smith | 2014-06-17 | 2 | -3/+7 |
* | | | Remove . and / from pkg name to avoid directory traversal | Renato Botelho | 2014-06-17 | 1 | -5/+5 |
* | | | Remove id=0 from miniupnpd menu and shortcut | Renato Botelho | 2014-06-17 | 2 | -3/+3 |
* | | | Avoid directory traversal when reading package xml files, also check if file ... | Renato Botelho | 2014-06-17 | 1 | -1/+6 |
* | | | Make sure variables are escaped, also replace exec calls to run rm by unlink_... | Renato Botelho | 2014-06-17 | 1 | -4/+4 |
* | | | Remove useless code, variable is set again on next line | Renato Botelho | 2014-06-17 | 1 | -3/+0 |
* | | | Escape parameters passed to shell_exec() | Renato Botelho | 2014-06-17 | 2 | -2/+2 |
* | | | Be more careful with host parameter and make sure it's escaped when call shel... | Renato Botelho | 2014-06-17 | 1 | -7/+6 |
* | | | Validate starttime and stoptime format | Renato Botelho | 2014-06-17 | 1 | -0/+8 |
| |/
|/| |
|
* | | Create some symlinks inside pbi dir to reduce differences between 2.1 and 2.2... | Renato Botelho | 2014-06-16 | 1 | -1/+22 |
* | | Make the byte counts on OpenVPN status human readable rather than huge unform... | jim-p | 2014-06-16 | 1 | -6/+6 |
* | | Avoid keeping old files from previous sessions on /tmp/configbak | Renato Botelho | 2014-06-13 | 1 | -0/+1 |
* | | cf/ dir is removed below, do not need to remove the file here | Renato Botelho | 2014-06-13 | 1 | -1/+0 |
* | | Fix path for trigger_initial_wizard | Renato Botelho | 2014-06-13 | 1 | -1/+1 |
* | | Merge pull request #1034 from vsquared56/master | Renato Botelho | 2014-06-13 | 1 | -4/+10 |
|\ \ |
|
| * | | Return full issuer for DN with multiple attribute values | vsquared56 | 2014-03-24 | 1 | -4/+10 |
* | | | Replace Header() calls by lowercase | Renato Botelho | 2014-06-13 | 22 | -26/+26 |
* | | | Merge pull request #1222 from phil-davis/patch-8 | Renato Botelho | 2014-06-13 | 1 | -4/+18 |
|\ \ \ |
|
| * | | | Handle firewall log filter regex input better bug #3689 | Phil Davis | 2014-06-03 | 1 | -4/+18 |
* | | | | Merge pull request #1229 from ExolonDX/branch-master_06 | Renato Botelho | 2014-06-13 | 7 | -15/+15 |
|\ \ \ \ |
|
| * | | | | Tidy up misc. widgets XHTML | Colin Fleming | 2014-06-05 | 7 | -15/+15 |
| |/ / / |
|
* | | | | Merge pull request #1228 from ExolonDX/branch_master_05 | Renato Botelho | 2014-06-13 | 1 | -2/+7 |
|\ \ \ \ |
|
| * | | | | Update "pkg_edit.,php" | Colin Fleming | 2014-06-05 | 1 | -2/+7 |
| |/ / / |
|
* | | | | Bring the code of captiveportal up to speed with its module counterpart requi... | Ermal | 2014-06-12 | 3 | -14/+14 |
* | | | | Fix i386 default URL for snapshots | Renato Botelho | 2014-06-12 | 1 | -1/+1 |
* | | | | Do not expire already disabled users, it fixes #3644 | Renato Botelho | 2014-06-12 | 1 | -1/+1 |
* | | | | Fix #3665, show IPSec tunnel description on status page | Renato Botelho | 2014-06-12 | 2 | -1/+25 |
* | | | | Fix a typo on variable name | Renato Botelho | 2014-06-12 | 1 | -1/+1 |
* | | | | Fix td class | Renato Botelho | 2014-06-12 | 1 | -1/+1 |
* | | | | Fix #3702, make sure tunnel inside IP is set when interface changes | Renato Botelho | 2014-06-11 | 1 | -1/+1 |
* | | | | remove extra . | Chris Buechler | 2014-06-11 | 1 | -1/+1 |
* | | | | Be more precise to match members of a bridge interface, it should fix #3637 | Renato Botelho | 2014-06-10 | 1 | -1/+3 |
* | | | | Fix #3700 and other syntax issues: | Renato Botelho | 2014-06-10 | 2 | -16/+17 |
* | | | | Do not allow interface group name to be bigger than 15 chars, helps ticket #3208 | Renato Botelho | 2014-06-09 | 1 | -1/+1 |
* | | | | Add some protection to parameters that come through _GET | Renato Botelho | 2014-06-06 | 2 | -13/+17 |
* | | | | Fix #3691, use curl instead of fetch to download update files | Renato Botelho | 2014-06-05 | 1 | -17/+13 |
* | | | | Whitespace fixes | jim-p | 2014-06-04 | 1 | -80/+80 |
* | | | | Allow the user to select "None" for OpenVPN client certificate, so long as th... | jim-p | 2014-06-04 | 2 | -13/+24 |