summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Protect rssfeed parameters with htmlspecialchars()Renato Botelho2014-06-171-6/+6
* Add comment I forgot on last commitRenato Botelho2014-06-171-0/+1
* Re-generate session ID on a successful login to avoid session fixationRenato Botelho2014-06-171-0/+1
* Avoid directory traversal on restorefullbackupRenato Botelho2014-06-171-2/+2
* Fix core dump on viewing invalid package logMatt Smith2014-06-172-3/+7
* Remove . and / from pkg name to avoid directory traversalRenato Botelho2014-06-171-5/+5
* Remove id=0 from miniupnpd menu and shortcutRenato Botelho2014-06-172-3/+3
* Avoid directory traversal when reading package xml files, also check if file ...Renato Botelho2014-06-171-1/+6
* Make sure variables are escaped, also replace exec calls to run rm by unlink_...Renato Botelho2014-06-171-4/+4
* Remove useless code, variable is set again on next lineRenato Botelho2014-06-171-3/+0
* Escape parameters passed to shell_exec()Renato Botelho2014-06-172-2/+2
* Be more careful with host parameter and make sure it's escaped when call shel...Renato Botelho2014-06-171-7/+6
* Validate starttime and stoptime formatRenato Botelho2014-06-171-0/+8
* Create some symlinks inside pbi dir to reduce differences between 2.1 and 2.2...Renato Botelho2014-06-161-1/+22
* Make the byte counts on OpenVPN status human readable rather than huge unform...jim-p2014-06-161-6/+6
* Avoid keeping old files from previous sessions on /tmp/configbakRenato Botelho2014-06-131-0/+1
* cf/ dir is removed below, do not need to remove the file hereRenato Botelho2014-06-131-1/+0
* Fix path for trigger_initial_wizardRenato Botelho2014-06-131-1/+1
* Merge pull request #1034 from vsquared56/masterRenato Botelho2014-06-131-4/+10
|\
| * Return full issuer for DN with multiple attribute valuesvsquared562014-03-241-4/+10
* | Replace Header() calls by lowercaseRenato Botelho2014-06-1322-26/+26
* | Merge pull request #1222 from phil-davis/patch-8Renato Botelho2014-06-131-4/+18
|\ \
| * | Handle firewall log filter regex input better bug #3689Phil Davis2014-06-031-4/+18
* | | Merge pull request #1229 from ExolonDX/branch-master_06Renato Botelho2014-06-137-15/+15
|\ \ \
| * | | Tidy up misc. widgets XHTMLColin Fleming2014-06-057-15/+15
| |/ /
* | | Merge pull request #1228 from ExolonDX/branch_master_05Renato Botelho2014-06-131-2/+7
|\ \ \
| * | | Update "pkg_edit.,php"Colin Fleming2014-06-051-2/+7
| |/ /
* | | Bring the code of captiveportal up to speed with its module counterpart requi...Ermal2014-06-123-14/+14
* | | Fix i386 default URL for snapshotsRenato Botelho2014-06-121-1/+1
* | | Do not expire already disabled users, it fixes #3644Renato Botelho2014-06-121-1/+1
* | | Fix #3665, show IPSec tunnel description on status pageRenato Botelho2014-06-122-1/+25
* | | Fix a typo on variable nameRenato Botelho2014-06-121-1/+1
* | | Fix td classRenato Botelho2014-06-121-1/+1
* | | Fix #3702, make sure tunnel inside IP is set when interface changesRenato Botelho2014-06-111-1/+1
* | | remove extra .Chris Buechler2014-06-111-1/+1
* | | Be more precise to match members of a bridge interface, it should fix #3637Renato Botelho2014-06-101-1/+3
* | | Fix #3700 and other syntax issues:Renato Botelho2014-06-102-16/+17
* | | Do not allow interface group name to be bigger than 15 chars, helps ticket #3208Renato Botelho2014-06-091-1/+1
* | | Add some protection to parameters that come through _GETRenato Botelho2014-06-062-13/+17
* | | Fix #3691, use curl instead of fetch to download update filesRenato Botelho2014-06-051-17/+13
* | | Whitespace fixesjim-p2014-06-041-80/+80
* | | Allow the user to select "None" for OpenVPN client certificate, so long as th...jim-p2014-06-042-13/+24
* | | Just use ID here instead.jim-p2014-06-041-2/+2
* | | Various fixes to diag_dump_states.php (Add interface column, some extra valid...jim-p2014-06-041-8/+20
* | | Silent pbi_infoRenato Botelho2014-06-031-1/+1
* | | Update csrf-magic to 1.0.4Renato Botelho2014-06-032-8/+45
* | | Reduce possible noiseRenato Botelho2014-06-031-1/+1
* | | Merge pull request #1226 from ExolonDX/branch_master_04Renato Botelho2014-06-031-0/+1
|\ \ \
| * | | Tidy up "status_queues.php" XHTMLColin Fleming2014-06-031-0/+1
| |/ /
* | | Merge pull request #1225 from ExolonDX/branch_master_03Renato Botelho2014-06-031-2/+1
|\ \ \
OpenPOWER on IntegriCloud