Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | | | | Update vpn_openvpn_server.php | Dmitriy K. | 2014-06-20 | 1 | -2/+0 | |
| | | | | | | | | | | | | | | | removed comments | |||||
| * | | | | Update vpn_openvpn_client.php | Dmitriy K. | 2014-06-20 | 1 | -3/+0 | |
| | | | | | | | | | | | | | | | removed comments | |||||
| * | | | | Default values for verb if it is not set when edit | Dmitriy K. | 2014-06-17 | 2 | -2/+8 | |
| | | | | | ||||||
| * | | | | a bit of refactoring | Dmitriy K. | 2014-06-17 | 1 | -4/+4 | |
| | | | | | | | | | | | | | | | | | | | | forgot to sync _server.php with _client.php naming style | |||||
| * | | | | patchpack1 | Dmitriy K. | 2014-06-17 | 2 | -2/+163 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | -Fix #3401 (Added tun option "Disable IPv6" -Added new options: route-nopull, route-noexec, verb; | |||||
* | | | | | Merge pull request #1241 from Gertjanpfsense/master | Renato Botelho | 2014-06-24 | 1 | -1/+6 | |
|\ \ \ \ \ | ||||||
| * | | | | | Update status_captiveportal.php | Gertjan | 2014-06-23 | 1 | -1/+6 | |
| | |/ / / | |/| | | | | | | | | Don't ask to select a zone if there is only ONE. | |||||
* | | | | | Fix dscp values and provide a config upgrade to fix values stored in ↵ | Renato Botelho | 2014-06-24 | 1 | -3/+3 | |
|/ / / / | | | | | | | | | | | | | config.xml. This is a proper fix for #3688 | |||||
* | | | | Merge pull request #1218 from razzfazz/nat_add_missing_protocols_master | Renato Botelho | 2014-06-20 | 1 | -1/+1 | |
|\ \ \ \ | ||||||
| * | | | | bring protocols on NAT edit page more in line with rule edit page | Daniel Becker | 2014-05-28 | 1 | -1/+1 | |
| | | | | | ||||||
* | | | | | Remove also . and / from graph | Renato Botelho | 2014-06-19 | 1 | -1/+1 | |
| | | | | | ||||||
* | | | | | Remove more backticks | Renato Botelho | 2014-06-19 | 1 | -2/+2 | |
| | | | | | ||||||
* | | | | | Fix status_rrd_graph_img.php and also improve it: | Renato Botelho | 2014-06-19 | 1 | -36/+37 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Remove escapeshellarg that broke command line - Only remove dangerous chars to avoid command injection - Replace all `hostname` calls by php_uname('n') - Replace all `date` calls by strftime() - Add $_gb to collect possibly garbage from exec return | |||||
* | | | | | Make sure single quotes are encoded and avoid javascript injection | Renato Botelho | 2014-06-19 | 1 | -2/+2 | |
| | | | | | ||||||
* | | | | | Fix indent and whitespaces | Renato Botelho | 2014-06-19 | 1 | -6/+7 | |
| | | | | | ||||||
* | | | | | Simplify logic, add some protection to user input parameters | Renato Botelho | 2014-06-18 | 1 | -27/+25 | |
| | | | | | ||||||
* | | | | | Fix whitespaces and indent | Renato Botelho | 2014-06-18 | 1 | -49/+52 | |
| | | | | | ||||||
* | | | | | We need to allow subdirectories under /usr/local/pkg, here is the proper fix | Renato Botelho | 2014-06-18 | 1 | -7/+5 | |
| | | | | | ||||||
* | | | | | Change the option for webconfig login autocomplete from opt-in to opt-out, ↵ | Renato Botelho | 2014-06-18 | 1 | -8/+8 | |
| | | | | | | | | | | | | | | | | | | | | also bump config version and write a function to keep the current status on upgrades | |||||
* | | | | | Fix syntax error | jim-p | 2014-06-17 | 1 | -1/+1 | |
| | | | | | ||||||
* | | | | | Protect servicestatusfilter parameter with htmlspecialchars() | Renato Botelho | 2014-06-17 | 1 | -1/+1 | |
| | | | | | ||||||
* | | | | | Protect rssfeed parameters with htmlspecialchars() | Renato Botelho | 2014-06-17 | 1 | -6/+6 | |
| | | | | | ||||||
* | | | | | Avoid directory traversal on restorefullbackup | Renato Botelho | 2014-06-17 | 1 | -2/+2 | |
| | | | | | ||||||
* | | | | | Fix core dump on viewing invalid package log | Matt Smith | 2014-06-17 | 2 | -3/+7 | |
| | | | | | ||||||
* | | | | | Remove . and / from pkg name to avoid directory traversal | Renato Botelho | 2014-06-17 | 1 | -5/+5 | |
| | | | | | ||||||
* | | | | | Remove id=0 from miniupnpd menu and shortcut | Renato Botelho | 2014-06-17 | 2 | -3/+3 | |
| | | | | | ||||||
* | | | | | Avoid directory traversal when reading package xml files, also check if file ↵ | Renato Botelho | 2014-06-17 | 1 | -1/+6 | |
| | | | | | | | | | | | | | | | | | | | | exists before try to read it | |||||
* | | | | | Make sure variables are escaped, also replace exec calls to run rm by ↵ | Renato Botelho | 2014-06-17 | 1 | -4/+4 | |
| | | | | | | | | | | | | | | | | | | | | unlink_if_exists() | |||||
* | | | | | Remove useless code, variable is set again on next line | Renato Botelho | 2014-06-17 | 1 | -3/+0 | |
| | | | | | ||||||
* | | | | | Escape parameters passed to shell_exec() | Renato Botelho | 2014-06-17 | 2 | -2/+2 | |
| | | | | | ||||||
* | | | | | Be more careful with host parameter and make sure it's escaped when call ↵ | Renato Botelho | 2014-06-17 | 1 | -7/+6 | |
| | | | | | | | | | | | | | | | | | | | | shell functions | |||||
* | | | | | Validate starttime and stoptime format | Renato Botelho | 2014-06-17 | 1 | -0/+8 | |
| |/ / / |/| | | | ||||||
* | | | | Make the byte counts on OpenVPN status human readable rather than huge ↵ | jim-p | 2014-06-16 | 1 | -6/+6 | |
| |/ / |/| | | | | | | | | unformatted numbers. | |||||
* | | | Replace Header() calls by lowercase | Renato Botelho | 2014-06-13 | 20 | -23/+23 | |
| | | | ||||||
* | | | Merge pull request #1229 from ExolonDX/branch-master_06 | Renato Botelho | 2014-06-13 | 7 | -15/+15 | |
|\ \ \ | ||||||
| * | | | Tidy up misc. widgets XHTML | Colin Fleming | 2014-06-05 | 7 | -15/+15 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | captive_portal_status.widget.php Remove NAME from TABLE tag, not valid in XHTML carp_status.widget.php Add missing closing TD tag dyn_dns_status.widget.php and installed_packages.widgete.php Update TD class to single line load_balancer_status.widget.php Add quotes to missing TD background colour traffic_graphs.widget.php Tidy up HTML Boolean operator Make NAME and ID in INPUT tag unique wake_on_lan.widget.php Remove B tag from "widgetsubheader", alread in CSS Center message across all columns within table | |||||
* | | | | Merge pull request #1228 from ExolonDX/branch_master_05 | Renato Botelho | 2014-06-13 | 1 | -2/+7 | |
|\ \ \ \ | ||||||
| * | | | | Update "pkg_edit.,php" | Colin Fleming | 2014-06-05 | 1 | -2/+7 | |
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "custom_php_after_head_command", if the PHP code also contains JavaScript ("squid_auth.xml" for example) then this will cause HTML errors, as you are not supposed to have anything between the closing HEAD tag and the opening BODY tag. Add the CLOSEHEAD PHP variable, move the include HEAD.INC into the PHP IF statement and manually close the HEAD tab, else just include HEAD.INC | |||||
* | | | | Bring the code of captiveportal up to speed with its module counterpart ↵ | Ermal | 2014-06-12 | 2 | -5/+5 | |
| | | | | | | | | | | | | | | | | requirments | |||||
* | | | | Fix #3665, show IPSec tunnel description on status page | Renato Botelho | 2014-06-12 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | Fix a typo on variable name | Renato Botelho | 2014-06-12 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | Fix td class | Renato Botelho | 2014-06-12 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | remove extra . | Chris Buechler | 2014-06-11 | 1 | -1/+1 | |
| | | | | ||||||
* | | | | Be more precise to match members of a bridge interface, it should fix #3637 | Renato Botelho | 2014-06-10 | 1 | -1/+3 | |
| | | | | ||||||
* | | | | Do not allow interface group name to be bigger than 15 chars, helps ticket #3208 | Renato Botelho | 2014-06-09 | 1 | -1/+1 | |
| |_|/ |/| | | ||||||
* | | | Add some protection to parameters that come through _GET | Renato Botelho | 2014-06-06 | 1 | -4/+8 | |
| | | | ||||||
* | | | Whitespace fixes | jim-p | 2014-06-04 | 1 | -80/+80 | |
| | | | ||||||
* | | | Allow the user to select "None" for OpenVPN client certificate, so long as ↵ | jim-p | 2014-06-04 | 1 | -6/+10 | |
| | | | | | | | | | | | | they supply and auth user/pass. Ticket #3633 | |||||
* | | | Just use ID here instead. | jim-p | 2014-06-04 | 1 | -2/+2 | |
| | | | ||||||
* | | | Various fixes to diag_dump_states.php (Add interface column, some extra ↵ | jim-p | 2014-06-04 | 1 | -8/+20 | |
| | | | | | | | | | | | | validation safety, etc). Should fix #2121 |