Renato Botelho
c1a50dd741
Remove debugging code that can lead us to XSS injection, also pass variables through htmlspecialchars() to sanitize
2014-11-20 10:25:49 -02:00
Renato Botelho
a8c82ef955
Pass path parameter through htmlpecialchars()
2014-11-18 12:03:25 -02:00
Renato Botelho
f376043cf3
Define a local boolean var for showact to avoid security issues, also pass order parameter trough htmlspecialchars()
2014-11-18 12:03:21 -02:00
Renato Botelho
fcfa23da8b
Merge pull request #1319 from phil-davis/patch-1
2014-11-05 07:12:17 -02:00
jim-p
5711c44624
Catch some more sensitive info when sanitizing.
2014-11-04 12:44:17 -05:00
Phil Davis
687712eec9
More gettext typos
2014-10-31 07:55:59 +05:45
Phil Davis
95169728d8
More gettext typos
2014-10-31 07:55:10 +05:45
Phil Davis
c69f62b8f9
More gettext typos
2014-10-31 07:54:07 +05:45
Phil Davis
91ee10c0a9
More gettext typos
2014-10-31 07:52:13 +05:45
Chris Buechler
e4982b9052
fix typoed gettext
2014-10-30 20:30:52 -05:00
Chris Buechler
4721677dd7
fix ping_hosts.sh to not ping IPsec if CARP is in backup
2014-10-27 15:36:13 -05:00
jim-p
5b473705fa
Encode values before displaying them back to the user in notification settings.
2014-10-21 14:25:35 -04:00
Chris Buechler
2c296872a7
h-node should be 8
2014-10-19 19:31:42 -05:00
jim-p
2f17d32ef2
Fix the log widget to lookup hosts by DNS using a link rather than AJAX. Quick fix for now. Ticket #3829
2014-10-16 15:22:27 -04:00
Phil Davis
cce09d9431
Ticket #3860 Correctly display SMTP SSL TLS boxes
...
After using the "Test" button, $_POST['smtpssl'] and $_POST['smtptls'] was 'on' or null - this got blindly copied back into $pconfig[] and resulted in the state of the SSL/TLS/STARTTLS checkboxes not being redisplayed.
Fixed by setting $pconfig['smtpssl'] and $pconfig['smtptls'] using the code that was previously done only to set these in $config
2014-10-09 22:27:50 +05:45
Phil Davis
c5cfa06b27
Minor fixes to firewall_aliases_edit
...
for 2.1 branch
2014-09-26 21:46:30 +05:45
Renato Botelho
9ec8e1f280
Allow hostname to start with '@.' for namecheap. It fixes #3568
2014-09-19 14:16:05 -03:00
Renato Botelho
e5b3335ad9
Do not call write_config() when click on Apply Changes because it was already done and it causes dhcpd to restart one more time on secondary nodes. It fixes #3797
2014-09-18 15:57:52 -03:00
Renato Botelho
cc265e2e59
Deduplicate <form>, fixes #3864
2014-09-17 10:34:14 -03:00
jim-p
929dfb4cb9
Add pages missing from the Status > Traffic Graph privilege that are required for the full page to load
2014-09-11 13:23:59 -04:00
Phil Davis
ffda0775f6
Standardise size of Duplicate Slice button
...
The Duplicate Slice button currently is displayed in smaller text and in a row of its own, separate from the row above that has the rest of the "Duplicate bootup slice" text and slice selection.
This change puts the button in the same row as the slice selection and text, and makes the button text be the same size as the text in other buttons on this page.
Did this first on a 2.1.5 system, so have submitted this against 2.1 branch. I will make another pull request against master also, because a later xhtml compliance change in master will conflict.
2014-09-11 07:55:06 +05:45
Renato Botelho
be32a003af
Delete IP Alias on CARP VIP interface on secondary node when it's deleted on primary. It fixes #3855
2014-09-10 15:39:56 -03:00
Renato Botelho
7397f64315
Fix operator
2014-09-10 15:39:56 -03:00
Renato Botelho
ccefd6031d
Import fix for http://bugs.jquery.com/ticket/9521
2014-09-09 11:53:56 -03:00
Renato Botelho
1b5675a77e
Mark host as up or down before execute script, then script can use this information.
...
Submitted by: Jean Debogue <jean@wedebugyou.com>
2014-09-04 07:47:24 -03:00
Renato Botelho
990162e36c
Remove some redundancy and simplify changes made on last commit
2014-08-30 13:38:23 -03:00
Renato Botelho
ce3ef2e7c9
Replace GET by POST, it fixes #3833
2014-08-29 18:01:09 -03:00
Renato Botelho
7486c1f6c1
Do not reconfigure dhcpd twice on secondary after config sync. Fixes #3797
2014-08-29 14:41:09 -03:00
Renato Botelho
ab6558b6a2
Alias name cannot have more than 31 chars, add maxlength here just as an extra check. Ticket #3827
2014-08-25 14:33:54 -03:00
Renato Botelho
7f00d47e3d
Fix text description for interface mismatch, fixes #3820
2014-08-21 07:32:10 -03:00
Jared Dillard
2a07df8528
Merge branch 'RELENG_2_1' of git.pfmechanics.com:pfsense/pfsense into RELENG_2_1
2014-08-20 18:41:10 -05:00
Jared Dillard
41312f7fec
fix top nav to fit gold in non-default themes
2014-08-20 18:39:24 -05:00
Matt Smith
fa8be5de0d
non-css parts of gold menu
2014-08-19 13:33:24 -05:00
Jared Dillard
bdde98fcbd
fix spacing in pfsense_ng topnav
2014-08-19 12:59:24 -05:00
jim-p
086e76dc9f
Ensure this is always an array to avoid a PHP error from foreach.
2014-08-15 08:40:21 -04:00
Renato Botelho
e35ec76333
Do not reset source and destination port range values when it's an associated rule created by nat port forward. It fixes #3778
2014-08-11 16:04:29 -03:00
jim-p
ffb8e02fc2
Avoid generating an invalid racoon config if the user specified a mobile pool that is too small.
2014-08-08 12:36:19 -04:00
jim-p
889c83d7f1
Require click-through POST confirmation when restoring or deleting a configuation from the backup history page.
2014-08-08 11:22:40 -04:00
jim-p
8108b4235b
Remove javascript alert DNS resolution action from the firewall log view. It was already removed from 2.2, and it's better not to allow a GET action to perform that action.
2014-08-08 10:26:36 -04:00
jim-p
a9d6ac9aac
Do not execute on GET, only pre-fill Host box so the user can press the button to execute. Turn alias creation links into submit buttons for POST. While here, remove some backticks and simplify a little.
2014-08-08 10:21:14 -04:00
Chris Buechler
6f4a300bf8
Shorten the wait at "reload" in startup wizard to 5 seconds from 60. That's more than adequate for current systems, no need to make people sit there for 1 minute. Many likely click out via the logo and miss the last screen entirely.
2014-08-08 00:04:32 -05:00
jim-p
978c71d28f
Encode interface/VIP descriptions before displaying them on the GRE and GIF pages also;
...
While here, the GRE page was missing IP aliases from its list of bind IPs, add it in.
2014-08-06 15:53:29 -04:00
jim-p
bf2fb3db04
Encode interface/VIP descriptions before displaying them on the NTP daemon settings.
2014-08-06 15:52:36 -04:00
jim-p
2276d74319
Encode the detail field of an alias entry before displaying its contents back to the user.
2014-08-06 15:34:05 -04:00
jim-p
52c67bc2d2
Escape the individual dnsmasq advanced/custom options
2014-08-06 15:26:41 -04:00
jim-p
1de3a5dd51
Fix input validation logic on diag_testport.php, escape more shell arguments for good measure
2014-08-04 15:25:48 -04:00
jim-p
5a1450dc0c
Allow hostnames in bulk import since they are valid entries in a network type alias.
2014-07-14 10:56:50 -04:00
Renato Botelho
1ee3a2955a
Change Cancel button to call history.back() as done in Firewall Rules, the current method has issues with IE 11, it should fix #3728
2014-07-08 12:44:24 -03:00
Renato Botelho
c69e813c84
Fix #3725 :
...
- Fix match_filter_field() and also simplify logic
- Fix $filterfieldsarray initialization
- Avoid to have double spaces on filterfieldsarray['act']
- Fix filter on Firewall Logs
2014-06-30 10:57:19 -03:00
Renato Botelho
1c9a521b93
Merge pull request #1208 from razzfazz/nat_add_missing_protocols
2014-06-20 09:36:10 -03:00
