diff --git a/src/usr/local/www/interfaces_bridge_edit.php b/src/usr/local/www/interfaces_bridge_edit.php
index 1f6aed5d71..a6ef756283 100644
--- a/src/usr/local/www/interfaces_bridge_edit.php
+++ b/src/usr/local/www/interfaces_bridge_edit.php
@@ -487,7 +487,7 @@ $section->addInput(new Form_Select(
$spanlist['selected'],
$spanlist['list'],
true
-))->setHelp('Add the interface named by interface as a span port on the bridge. Span ports transmit a copy of every frame received by the bridge.' .
+))->setHelp('Add the interface named by interface as a span port on the bridge. Span ports transmit a copy of every frame received by the bridge. ' .
'This is most useful for snooping a bridged network passively on another host connected to one of the span ports of the bridge.
' .
'%sThe span interface cannot be part of the bridge member interfaces.%s', ['', '']);
@@ -584,7 +584,7 @@ $section->addInput(new Form_Select(
$edgelist['selected'],
$edgelist['list'],
true
-))->setHelp('Enable Spanning Tree Protocol on interface. The if_bridge(4) driver has support for the IEEE 802.1D Spanning Tree Protocol (STP).' .
+))->setHelp('Enable Spanning Tree Protocol on interface. The if_bridge(4) driver has support for the IEEE 802.1D Spanning Tree Protocol (STP). ' .
'STP is used to detect and remove loops in a network topology.');
$section->addInput(new Form_Input(
@@ -609,7 +609,7 @@ $section->addInput(new Form_Input(
'number',
$pconfig['hellotime'],
['placeholder' => 2, 'min' => 1, 'max' => 2, 'step' => '0.1']
-))->setHelp('Set the time in seconds between broadcasting of Spanning Tree Protocol configuration messages. The hello time may only be changed when operating in legacy STP mode.' .
+))->setHelp('Set the time in seconds between broadcasting of Spanning Tree Protocol configuration messages. The hello time may only be changed when operating in legacy STP mode. ' .
'The default is 2 seconds. The minimum is 1 second and the maximum is 2 seconds.');
$section->addInput(new Form_Input(
diff --git a/src/usr/local/www/services_captiveportal.php b/src/usr/local/www/services_captiveportal.php
index 368865a2b3..080c0fe6f4 100644
--- a/src/usr/local/www/services_captiveportal.php
+++ b/src/usr/local/www/services_captiveportal.php
@@ -688,7 +688,7 @@ $section->addInput(new Form_Checkbox(
$pconfig['passthrumacadd']
))->setHelp(sprintf('When enabled, a MAC passthrough entry is automatically added after the user has successfully authenticated. Users of that MAC address will ' .
'never have to authenticate again. To remove the passthrough MAC entry either log in and remove it manually from the ' .
- '%s or send a POST from another system.' .
+ '%s or send a POST from another system. ' .
'If this is enabled, RADIUS MAC authentication cannot be used. Also, the logout window will not be shown.', 'MAC tab'));
$section->addInput(new Form_Checkbox(
diff --git a/src/usr/local/www/services_captiveportal_hostname.php b/src/usr/local/www/services_captiveportal_hostname.php
index a9b2b507fd..05b6ffff93 100644
--- a/src/usr/local/www/services_captiveportal_hostname.php
+++ b/src/usr/local/www/services_captiveportal_hostname.php
@@ -63,7 +63,7 @@
$directionicons = array('to' => '→', 'from' => '←', 'both' => '⇄');
$notestr =
- gettext('Adding new hostnames will allow a DNS hostname access to/from the captive portal without being taken to the portal page.' .
+ gettext('Adding new hostnames will allow a DNS hostname access to/from the captive portal without being taken to the portal page. ' .
'This can be used for a web server serving images for the portal page, or a DNS server on another network, for example. ' .
'By specifying from addresses, it may be used to always allow pass-through access from a client behind the captive portal.');
diff --git a/src/usr/local/www/services_igmpproxy_edit.php b/src/usr/local/www/services_igmpproxy_edit.php
index c26cd9fa71..a6770abbf8 100644
--- a/src/usr/local/www/services_igmpproxy_edit.php
+++ b/src/usr/local/www/services_igmpproxy_edit.php
@@ -202,7 +202,7 @@ $section->addInput(new Form_Select(
'Type',
$pconfig['type'],
['upstream' => gettext('Upstream Interface'), 'downstream' => gettext('Downstream Interface')]
-))->setHelp('The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources .' .
+))->setHelp('The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. ' .
'There can only be one upstream interface.' . '
' .
'Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and '.
'receive multicast data. One or more downstream interfaces must be configured.');
diff --git a/src/usr/local/www/services_router_advertisements.php b/src/usr/local/www/services_router_advertisements.php
index 6852d13009..2d5c05f876 100644
--- a/src/usr/local/www/services_router_advertisements.php
+++ b/src/usr/local/www/services_router_advertisements.php
@@ -304,7 +304,7 @@ $section->addInput(new Form_Select(
' Router Only to only advertise this router' . '
' .
' Unmanaged for Router Advertising with Stateless Autoconfig' . '
' .
' Managed for assignment through a DHCPv6 Server' . '
' .
- ' Assisted for DHCPv6 Server assignment combined with Stateless Autoconfig.' .
+ ' Assisted for DHCPv6 Server assignment combined with Stateless Autoconfig. ' .
'It is not required to activate this DHCPv6 server when set to "Managed", this can be another host on the network');
$section->addInput(new Form_Select(
diff --git a/src/usr/local/www/vpn_ipsec_settings.php b/src/usr/local/www/vpn_ipsec_settings.php
index b935672c37..d256de8e16 100644
--- a/src/usr/local/www/vpn_ipsec_settings.php
+++ b/src/usr/local/www/vpn_ipsec_settings.php
@@ -325,9 +325,9 @@ $section->addInput(new Form_Checkbox(
'Accept unencrypted ID and HASH payloads in IKEv1 Main Mode',
$pconfig['acceptunencryptedmainmode']
))->setHelp(
- 'Some implementations send the third Main Mode message unencrypted, probably to find the PSKs for the specified ID for authentication.' .
+ 'Some implementations send the third Main Mode message unencrypted, probably to find the PSKs for the specified ID for authentication. ' .
'This is very similar to Aggressive Mode, and has the same security implications: ' .
- 'A passive attacker can sniff the negotiated Identity, and start brute forcing the PSK using the HASH payload.' .
+ 'A passive attacker can sniff the negotiated Identity, and start brute forcing the PSK using the HASH payload. ' .
'It is recommended to keep this option to no, unless the exact implications are known and compatibility is required for such devices (for example, some SonicWall boxes).'
);