summaryrefslogtreecommitdiffstats
path: root/usr/local
Commit message (Collapse)AuthorAgeFilesLines
* change the location of jquery-ui images in each theme's css fileJared Dillard2015-03-189-144/+144
|
* Cleanup code path when adding a new userPhil Davis2015-03-181-2/+2
| | | | | | | | | | | | | 1) Only attempt to delete the oldusername if it actually was non-empty - at the moment errors are logged in the system log when adding a new user, because the code was trying to delete the user name "". 2) Call local_user_set() first to create (change, whatever) the user record. This makes the user record exist for a new user. Then call local_user_set_groups() to sort out what groups the user should be in or not in. The existing code would fail to add a new user to the specified group/s because local_user_set_groups() was called too early, before the user actually existed. Typical system log errors from the old code: Mar 18 17:10:31 php-fpm[9542]: /system_usermanager.php: Tried to remove user but got user pw instead. Bailing. Mar 18 17:10:31 php-fpm[9542]: /system_usermanager.php: The command '/usr/sbin/pw groupmod admins -g 1999 -M '0,2003,2006,2008' 2>&1' returned exit code '67', the output was 'pw: user `2008' does not exist' From looking at the code history, I think this has been this way for a long time, not a new bug at all. Discussed in forum: https://forum.pfsense.org/index.php?topic=90700.msg501766#msg501766
* Do not allow VLAN tag zeroPhil Davis2015-03-181-1/+1
| | | | | At the moment you can make a VLAN with tag 0. The input validation does not catch it because when $_POST['tag'] = "0" that evaluates to false by PHP. Always make the checks on 'tag' value whenever the 'tag' key is set at all. If the (required) 'tag' key is not set, then that is already checked for by do_input_validation().
* pfSsh.php readline function return valuePhil Davis2015-03-161-1/+1
| | | | This just looks wrong. But I guess the code path never comes through here because function readline() already exists in the environment of this script.
* txpower was disabled for good reason it would appear, it triggers syntax ↵Chris Buechler2015-03-131-1/+3
| | | | errors in some configurations. Disable it again since it's been disabled for years, and comment out the user-facing config portion for now since it doesn't do anything. Ticket #4516
* Apply WME input validation to all modes, not just hostap. Ticket #4516Chris Buechler2015-03-131-5/+5
|
* Default to 11ng if an option hasn't been configured. Previously we let the ↵Chris Buechler2015-03-131-1/+7
| | | | browser pick the first in the list (the first the card reported as available), which ended up being 802.11b. Ticket #4516
* Default to WPA2, AES for new wireless interface configs. Ticket #4516Chris Buechler2015-03-131-2/+2
|
* Auto-size the interface box on the bridge edit page.Chris Buechler2015-03-131-1/+2
|
* touch up interfaces.php textChris Buechler2015-03-137-10/+10
|
* Require WPA PSK where WPA-PSK is enabled. Clean up some other text. Ticket #4516Chris Buechler2015-03-127-10/+15
|
* clean up input errors textChris Buechler2015-03-127-9/+9
|
* Fix up text, remove "only for Atheros" since the option is only shown if a ↵Chris Buechler2015-03-127-5/+5
| | | | compatible card exists.
* "Auto" channel with hostap doesn't work correctly at the moment, force ↵Chris Buechler2015-03-121-0/+4
| | | | choosing a specific channel with hostap mode for now.
* add more wireless validation. Ticket #4516Chris Buechler2015-03-121-1/+4
|
* Add more validation for wireless config settings. Ticket #4516Chris Buechler2015-03-121-0/+22
|
* Add more input validation for wireless parameters. Ticket #4516Chris Buechler2015-03-121-0/+36
|
* Touch up wifi textChris Buechler2015-03-127-12/+12
|
* clean up unique IDs text a bit.Chris Buechler2015-03-111-2/+2
|
* Proper fix #4443, do not unset carp entry when content differ, also set ↵Renato Botelho2015-03-111-3/+7
| | | | correct real interface and use subnet to check IP protocol
* Save vip interface and subnet to use to delete old vips from secondary ↵Renato Botelho2015-03-111-13/+14
| | | | nodes. Fixes #4446
* Revert "Use a consistent variable name here. related to Ticket #4446"Renato Botelho2015-03-111-4/+4
| | | | This reverts commit 0e7954b8a333d7ca92f56c86c74e2d9d7457b546.
* add granular control of state timeouts. Ticket #4509Chris Buechler2015-03-111-2/+196
|
* Remove BEAST protection option since default cipher is now good and works ↵Renato Botelho2015-03-111-37/+0
| | | | with hifn cards
* Fix password box cursor positionPhil Davis2015-03-114-29/+29
| | | | | | | | | | | | | | | Similar to https://github.com/pfsense/pfsense/commit/dedc40f7ded5f88aee4720aa8a3a57667b975254 The password field shows the little lock icon, but the text input area starts over the top of the icon and as I type in the field the password "dots" go over the lock icon in each of these data entry places. Changing the field name/id to not be "password" but to be "passwordfld", "passwordfld1" "passwordfld2" and the like fixes it. Something does not like the field being called just "password". In interfaces.php I also changed the field "username" to be "ppp_username". This standardized it to work in a similar way to pppoe_username pptp_username fields. It looks easier to understand for me.
* Pencil symbolsPhil Davis2015-03-119-16/+16
| | | | | | | | | These are places in the GUI where the cursor sits not in the far left side of the input box and there is odd-looking white space to the left of the cursor. Normally there would be a little input graphic in the white space to the left of the cursor (a pencil, a computer screen, a lock symbol...) This change makes the pencil be displayed in all those places.
* update description after adaptive start/end default change.Chris Buechler2015-03-111-1/+1
|
* Use a consistent variable name here. related to Ticket #4446Chris Buechler2015-03-101-4/+4
|
* Don't enable interfaces_use by default. Add checkbox to enable on AdvancedChris Buechler2015-03-101-0/+19
| | | | | | | tab, in case there are scenarios where it's desirable. Ticket #4341 Conflicts: etc/inc/vpn.inc
* Fixes #4427 Correct traffic shaper wizard to properly save and use Voip ↵Ermal LUÇI2015-03-101-2/+6
| | | | provided settings
* Fixes #4427 Correct traffic shaper wizard to properly save and use Voip ↵Ermal LUÇI2015-03-101-2/+6
| | | | provided settings
* Fixes #4446 Correct ipalias removal on top of carp during configuration sync.Ermal LUÇI2015-03-091-1/+5
|
* Allow reassignment from PPP types to DHCP. From testing, it appears to work ↵jim-p2015-03-091-4/+0
| | | | | | OK, this input validation appears to be outdated. If there is some edge case that this catches, perhaps it needs to be a more specific test.
* Add missing 'break' statement that broke switching from a PPP type to 'none'.jim-p2015-03-091-0/+2
|
* DNS Forwarder Host Override Edit make the pencil symbols appearPhil Davis2015-03-091-4/+4
| | | | | | | In most places in the GUI a little pencil symbol appears before text input fields. For example it already appears for the Host, Domain and Description fields in this very form when you "Enter additional names for this host." But in the main 4 fields of this form, the pencil does not display. This fixes it to be the same as elsewhere. I guess this is the "standard" supposed to be used. If so, then I will find the other places where class="formfld unknown" has the "unknown" missing.
* Fix password box in diag_authenticationPhil Davis2015-03-091-3/+3
| | | | | | | | In 2.2 when I go to Diagnostics->Authentication the password field shows the little lock icon, but the text input area starts over the top of the icon and as I type in the field the password "dots" go over the lock icon. This does not happen in 2.1.5 - the password entry cursor sits after the lock icon. This problem is also not evident on most other password entry fields in 2.2 I stared at it for a while, then saw that in other places the password field is not literally called "password", so I thought what the heck, I will change the field name - it fixed the display issue!!! What??? Anyway, this fixes the display issue on my system. If someone knows really why having the field name/id="password" is a problem then they could fix the underlying reason - but this works around whatever is the issue. If you think this is an OK fix then I will also find the couple of other places swhere this happens and make the same "fix".
* Add missing opening bracketk-paulius2015-03-091-1/+1
|
* Update help to current config structure, touch up text while here. Fixes #4492Chris Buechler2015-03-081-3/+3
|
* Check for console="comconsole* rather than just *comconsole* in loader.conf, ↵Chris Buechler2015-03-071-1/+1
| | | | so it doesn't match just having comconsole_speed in loader.conf. Ticket #4464
* Expand CARP demotion error, add button to reset demotion status.jim-p2015-03-061-3/+23
|
* Remove multiple spaces from dns_split as a seatbelt, also fix the message ↵Renato Botelho2015-03-061-1/+3
| | | | since field is expected to be space separated and not comma. Ticket #4418
* touch up textChris Buechler2015-03-063-3/+3
|
* fix up textChris Buechler2015-03-057-10/+10
|
* Don't save config if input validation fails. Add input validation preventing ↵Chris Buechler2015-03-051-48/+55
| | | | "Harden DNSSEC Data" from being enabled if DNSSEC support isn't enabled.
* Remove the harden-glue option entirely and hard code it to yes. Ticket #4402Chris Buechler2015-03-051-15/+0
|
* Encode and check values for filtering variables in diag_logs_filter.phpjim-p2015-03-051-13/+13
|
* Do not render the services_unbound_acls page with an invalid ID.jim-p2015-03-051-0/+5
|
* Stricter validation and encoding for traffic shaper queues.jim-p2015-03-051-2/+2
|
* Jettison unused dragtable code from firewall_rules.php, it was broken and ↵jim-p2015-03-051-92/+2
| | | | inactive and only causing trouble.
* Improve validation and encoding of the zone for Captive Portal Statusjim-p2015-03-051-14/+19
|
OpenPOWER on IntegriCloud