summaryrefslogtreecommitdiffstats
path: root/usr/local
Commit message (Collapse)AuthorAgeFilesLines
...
* Encoding in vpn_ipsec_settings.phpjim-p2015-06-161-1/+1
|
* More encodingjim-p2015-06-161-2/+2
|
* Fix some low-hanging potential security issues.jim-p2015-06-163-8/+8
|
* Be more careful with encoding on pages that use single quotes around HTML ↵jim-p2015-06-162-5/+5
| | | | attributes
* Additional encoding for system_advanced_misc.phpjim-p2015-06-161-7/+7
|
* Protect single quotes as well to prevent JS injection, due to the way this ↵jim-p2015-06-161-10/+10
| | | | page uses single quotes for attributes.
* Encode parameters in system_advanced_firewall.php before displaying back to ↵jim-p2015-06-161-5/+5
| | | | the user.
* Merge manullay pull/1722Ermal LUÇI2015-06-151-1/+1
|
* Remove the GUI for the pc-sysinstaller as well and add it to obsoletee filesErmal LUÇI2015-06-152-1218/+0
|
* status_queues missing semi-colonPhil Davis2015-06-151-1/+1
| | | | This really looks like it should have a semi-colon. Somehow the PHP interpreter is not being fussy about it in this context, I guess being followed by the "endif;" keyword the interpreter guesses the previous statement must be done.
* Ticket #4655 well manually merge pull/1715. Thanks: PhilErmal LUÇI2015-06-151-3/+9
|
* add input validation for proxy URL, port, user.Chris Buechler2015-06-141-1/+13
|
* Ok another round of this which unbreaks input error validation messagesErmal LUÇI2015-06-131-3/+6
|
* Make this right finally :). Thanks-ti: Phil-davisErmal LUÇI2015-06-121-3/+2
|
* Activate the redirection that for some reason got disabledErmal LUÇI2015-06-121-2/+2
|
* Ticket #4655 Do not behave against the logic of checkbox and description.Ermal LUÇI2015-06-111-2/+3
|
* fix checking for overlaps of NAT destination portbruno2015-06-111-2/+2
|
* Make the host uuid opt-outErmal LUÇI2015-06-111-0/+18
|
* Re-generate broken .mo files, it fixes #4705Renato Botelho2015-06-072-0/+0
|
* Remove duplicate messageRenato Botelho2015-06-071-4/+0
|
* Clean up, organize, and expand the info presented by status.php. Save the ↵jim-p2015-06-051-76/+94
| | | | output to individual text files and compress them into a .tgz for later download.
* Also sanitize OpenVPN static/tls keys in status.phpjim-p2015-06-051-0/+2
|
* Setup Wizard can result in invalid LAN DHCP pool calculationPhil Davis2015-06-041-11/+44
| | | | | | | | | | | | 1) consider where the LAN IP is in the subnet range and then put the DHCP pool in the biggest remaining segment, either above or below. 2) Check the size of the available segment. If it is reasonably big then leave some space at either end of the segment, like the old code was doing. Otherwise give all the space to the pool. 3) Do not allow subnet mask 32 - I can't think of a use case for LAN to have a /32 subnet mask, it kind of breaks the whole concept of LAN. 4) Provide more detailed separate messages if the user tries to use the network address or broadcast address as the LAN IP.
* Improve setup wizard host name checkPhil Davis2015-06-041-2/+2
| | | | | | Redmine #4712 It seems good enough to make the regex strings here be "reasonable". The full checks are done after pressing Next and the correct routines are called that do an exhaustive check. There seems not much point in trying to re-engineer all that here also. Odd things like "-hostname" and "hostname-" would be allowed through here but are caught by the full validation check. "." and "|" were being allowed in this regex - no idea why!
* Minor wizard text fixupsPhil Davis2015-06-025-11/+11
|
* Supply current WAN gateway name to wizardPhil Davis2015-06-021-1/+6
| | | | | As the name of the WAN gateway is not always WANGW. Should fix redmine #4713
* Clarify DNS Forwarder and Resolver both apply in these places. partially ↵Chris Buechler2015-06-0210-8/+8
| | | | Ticket #3730
* Allow option to specify just 1 of user and pass in OpenVPN .up filePhil Davis2015-05-301-3/+3
| | | | | | | | | | | | | | As per comment in https://redmine.pfsense.org/issues/3633 sometimes the server end only requires a password, no username. Usually 1 long string that serves as the hard-to-guess authentication. OpenVPN expects something to be on the first line of the ".up" file - traditionally called the username. It also insists on the second line being present, but is happy with it being empty - this is the authentication information traditionally called "password". Let the user put the single piece of authentication information in either the Username or Password field on the web GUI - whichever they feel comfortable calling it. In the ".up" file it has to always be the first line to keep OpenVPN happy.
* remove pointless filter on dhcp static mappings tableWill Boyce2015-05-302-3/+1
|
* Added the Stateless DHCP Dropdown hereaqueeb2015-05-281-1/+2
|
* Add tracker rule number to dynamic firewall logPhil Davis2015-05-261-2/+2
| | | Bug #4730 - the code was not there yet.
* Call htmlspecialchars() to remove dangerouns chars from zone parameter. Also ↵Renato Botelho2015-05-251-3/+3
| | | | redirect user to services_captiveportal_zones.php when an invalid zone is passed
* Unbalanced td tag in services_dnsmasqPhil Davis2015-05-251-0/+1
|
* Consistent clear_subsystem_dirty after unbound restartPhil Davis2015-05-251-1/+2
| | | | from services_dhcp. This looks like it is wanting curlies to put all clear_subsytem_dirty inside the "if".
* Update/correct wireless status flags and capabilities list.jim-p2015-05-221-3/+3
| | | | There are many more possible flags, documented on the wiki: https://doc.pfsense.org/index.php/Wireless_Status
* Update pkg_edit.phpPhil Davis2015-05-221-10/+23
| | | | | | | a) When we are doing combined fields and usecolspan2 is in effect, then usecolspan2 is also a signal that we want to spread the combined fields horizontally in a single row. In that case we want the combined fields to all be in a single "tr" tag enclosing them all. That was already working in that way. b) But if usecolspan2 is NOT in effect, then we want the combined fields to still run "together" but vertically under each other. In this case we want each field to be in its own "tr" tag. This change makes (b) happen. If combinedfields is not set, then each of the "if" tests here still follows the same path it did previously, so there should be no effect on the HTML output for any ordinary package fields.
* Correct descriptions on Key Rotation and Master Key Regeneration for wireless.jim-p2015-05-211-2/+2
|
* More combinedfields and usecolspan2 fixesPhil Davis2015-05-201-4/+12
| | | | | | | Actually the "tr" tag needs to be a single tag-pair that encloses all of the set of fields with combinedfields specified - combinedfields=begin is where the "tr" tag starts and combinedfields=end is where the "tr" tag ends, enclosing a whole set of combined fields. That allows usecolspan2 to work. In the previous change I had made it enclose every field in its own "tr" tag-pair That caused usecolspan2 to be ineffective at spreading the combined fields across the display. Also colspan needs to be initialised each time around the loop - it was getting applied to all fields further down the page after the first one it was used in. This is the version for 2.2.*
* Fix tr use for combinedfields in pkg xmlPhil Davis2015-05-201-5/+8
|
* Use correct variable to fix paginationRenato Botelho2015-05-151-3/+2
|
* Fix startingat var name typo in pkp.phpPhil Davis2015-05-151-1/+1
| | | | | | | | Even with this fix, the code does not make sense. The first test is: if ($startingat > -1) if it gets into the else, then $startingat must be negative. But the test in the "else" tests for >1 ??? Someone who knows what it really is supposed to do could fix it!
* Remove the "insert my MAC" feature from interfaces.php. It hasn't worked in ↵Chris Buechler2015-05-141-9/+0
| | | | | | | a while (credit sbeaver for noticing), and the only thing it tends to accomplish is breaking people's connectivity from the system where they end up duplicating the MAC of their local system. Conflicts: usr/local/www/interfaces.php
* Add some curlies in status_rrd_graph_imgPhil Davis2015-05-141-4/+6
| | | | | These "if data" tests look like they should apply to all 4 lines below them. After sorting out this real-looking issue, I can mess with the rest of the formatting...
* Cleanup code logic status_upnpPhil Davis2015-05-141-4/+8
| | | | | | 1) Variable $i is was set, incremented and not used. 2) "if preg_match" at line 94 had no curlies after it, so it was only applying to the first line after it ($rdr_proto = ...) It really looks like "if preg_match"should apply to the whole code chunk - settings the various "rdr*" vars and then spitting out the "tr" with the various matches values in the row. Somebody with some various UPnP enabled and running should test this to see if the status page still works with this change. I think it only makes a difference if $rdr_entries has some lines in it that do not match the regex - in that case the old code might have displayed some rubbish or (almost?) duplicated rows.
* Fix alias rename and delete bug #4701Phil Davis2015-05-142-10/+10
| | | | The old advancedoutbound key in config.xml is now called outbound.
* Slash-select should be inside if in load_balancer_pool_editPhil Davis2015-05-131-1/+1
| | | otherwise there is an unbalanced slash-select when the else happens (if there are no load-balancer monitors defined)
* fixed indent according to the style guide.Berger Alexander2015-05-111-12/+12
|
* Currently pfsense enforces unique unqualified hostnames for static dhcp ↵Berger Alexander2015-05-111-9/+13
| | | | | | leases, which is not correct as only the fully qualified hostname (hostname + domainname) must be unique. With this commit the old validation logic for uniqeness is modified such that hostnames no longer need to be unique and at the same time the fully qualified hostname hast to be unique. This change makes it possible to have host with identical hostnames in different (sub)domains. For example myhost.sales.acme.com and myhost.support.acme.com will now be possible.
* Firewall Rules Edit missing slashPhil Davis2015-05-111-1/+1
| | | | This should be the end of a "tr" here. Browsers seem to be forgiving of this stuff - I don't see any difference in rendering in Firefox before or after this change.
* Unmatched td in firewall_natPhil Davis2015-05-081-0/+1
| | | | | This file seems to have an unmatched "td" ending. Adding the line here matches the "td" at line 320 and this embraces the little table that has the 4 icons in it in a square that comes at the right hand end of each port-forward entry in the main table. I can't see any difference in the rendering of the page, at least on Firefox, with and without this fix. The tabbing of this file is woeful. I am fixing that up with a code-style review. But thought I should do a separate pull request for this kind-of-functional fix.
OpenPOWER on IntegriCloud