Commit Graph

8182 Commits

Author SHA1 Message Date
jim-p
2b30323ef3 Copy logic for when to show the cellular tab from status_rrd_graph.php. Fixes #714 2010-11-10 21:56:12 -05:00
Erik Fonnesbeck
fa6c42d05b Return this field to its old name to prevent a conflict of names and since the code that uses it still refers to it by that name. Issue reported at http://forum.pfsense.org/index.php/topic,29985.0.html
This caused the full name field to be ignored when creating a user and prevented making a certificate at the creation of the user (either could still be changed afterward).
2010-11-10 18:30:55 -07:00
jim-p
29f76490d8 Only use escapeshellarg when passing the arguments to the shell. Fixes #1005 2010-11-10 17:22:37 -05:00
Ermal
dd18038e50 * Call get_configured_interface_* functions only once in the code
* Optimize the test if the passed interface is a vaild one
* Fix the apply settings to actually do something rather than do nothing at all
* Some style and whitespace fixes
2010-11-10 21:42:46 +00:00
Scott Ullrich
612fa5724a Note that this textbox controls HTTP_REFERER hostname checks as well 2010-11-10 12:25:05 -05:00
Scott Ullrich
4fe9c2dcf1 * Adding function get_configured_ip_addresses() which returns all interfaces and their configured IP address
* Add checkbox to System -> Advanced -> Admin for HTTP_REFERER checks
* Add and enforce HTTP_REFERER check if checkbox is not checked.

This will prevent HTML pages from crafting HTML GETs against the web interface and will prevent firewall admins from being "tricked" into clicking on links that may be harmful to their firewall.
2010-11-10 11:56:23 -05:00
Scott Ullrich
daab67a170 Fix misc XSS issues from davey b 2010-11-10 09:49:47 -05:00
Erik Fonnesbeck
f0ce6758e8 Add option to System: Firmware: Settings for running gitsync after installing an update, hidden/disabled if git has not been installed yet. 2010-11-10 03:03:00 -07:00
Scott Ullrich
506f6e90d4 Ensure csrf magic is loaded 2010-11-09 13:07:55 -05:00
Scott Ullrich
034f08e7dd Fix Misc XSS issues 2010-11-09 11:38:27 -05:00
Scott Ullrich
9b2bc1af9c Testing csrf-magic 2010-11-09 11:23:49 -05:00
Erik Fonnesbeck
678dfd0fa8 Add a setting for the data type of values used with DHCP option numbers and input validation for each type. Fixes #962 2010-11-09 05:14:29 -07:00
Erik Fonnesbeck
5d27a3dc14 Add a function type to the field types allowed, to allow more field types without directly adding all of them to row helper. 2010-11-09 03:02:54 -07:00
Chris Buechler
5868547083 fix input validation for GRE 2010-11-08 21:23:29 -05:00
jim-p
6e8b0ec310 Add a button to connect a non-mobile IPsec VPN from Status > IPsec. Sends a ping from a local IP in the p2 subnet (if one exists on the router) to the remote p2 subnet. 2010-11-08 17:21:27 -05:00
Scott Ullrich
61ab4cd327 Return disabled interfaces as well 2010-11-08 10:53:00 -05:00
Scott Ullrich
157b9d46a2 Return disabled interfaces as well 2010-11-08 10:52:46 -05:00
Warren Baker
4395500c09 Recent move (d32d3970d5) of routed/ items required additional files to be updated to reflect correct path. 2010-11-08 08:44:20 +02:00
Scott Ullrich
818c54ee19 Do not use sub array 2010-11-06 15:34:36 -04:00
Scott Ullrich
43a0ac8a29 Make sure ipsec is incuded in valid interfaces 2010-11-06 15:31:52 -04:00
Scott Ullrich
e5fee34061 Move Note to bottom of page 2010-11-06 15:24:05 -04:00
Scott Ullrich
366e2be817 Show interface description 2010-11-06 15:22:59 -04:00
Scott Ullrich
2c4a13d91b Interface names should appear as uppercase 2010-11-06 14:40:01 -04:00
Scott Ullrich
9c3cac0cb5 Interface names should appear as uppercase 2010-11-06 14:38:38 -04:00
Scott Ullrich
5aaae0e32e Do not escape strings twice 2010-11-06 14:34:28 -04:00
Scott Ullrich
0f08affeb4 Misc fixes. Use htmlspecialchars() in more places. Use escaped shell argument. 2010-11-06 14:26:07 -04:00
Scott Ullrich
66d57db5e4 Interface names should appear as uppercase 2010-11-06 14:11:35 -04:00
Scott Ullrich
4cea35b344 Interface names should appear as uppercase 2010-11-06 14:10:09 -04:00
jim-p
c1f95f5c44 Various CRL fixes. 2010-11-06 14:08:18 -04:00
Scott Ullrich
e8ad860fb4 Interface names should appear as uppercase 2010-11-06 14:03:23 -04:00
Scott Ullrich
9455610597 Define variable a bit earlier in case its shared 2010-11-06 14:01:57 -04:00
Scott Ullrich
d815d5faec Use get_configured_interface_list() so Ermal does not yell at me :) 2010-11-06 14:00:11 -04:00
Scott Ullrich
98bcf1f8b5 Fix misc input validation errors. Move routed/* to same dir as pkg items 2010-11-06 12:40:54 -04:00
Scott Ullrich
6a93718873 Ensure passed interface is valid 2010-11-06 12:31:03 -04:00
Scott Ullrich
8625c24f8e Use htmlspecialchars() for santitized output 2010-11-06 12:24:59 -04:00
Scott Ullrich
50b2f6ab4c Ensure that we are working with a proper passed interface.. 2010-11-06 12:15:01 -04:00
jim-p
0397625421 If the anti-lockout rule is active, show it in the rules list for the LAN interface (or WAN if the interface count is 1, same rules as in filter.inc for putting the rule in the ruleset) 2010-11-05 10:12:28 -04:00
jim-p
428e66b61b Warn a user when entering the OpenVPN client/server screens that they need a CA/Cert if none exist. 2010-11-04 14:30:50 -04:00
jim-p
9882cbef8e Use addslashes() here to prevent unescaped quotes from causing PHP errors. Fixes advanced/custom options in OpenVPN wizard. 2010-11-04 13:18:29 -04:00
jim-p
3339c56f95 Use a different variable name here to avoid colliding with another of the same name. 2010-11-04 10:39:17 -04:00
jim-p
9ad0ab8085 Use != here to avoid a potential issue with empty() testing intermediate arrays. 2010-11-03 17:26:44 -04:00
jim-p
42724fdd08 Add a button to the filter reload screen to force a config sync (only shows up if a config sync peer is defined). 2010-11-03 17:18:08 -04:00
jim-p
366006156f Fix saving of off/disabled PPPoE server instances. Fixes #987 2010-11-03 16:11:00 -04:00
jim-p
b039f099e6 Don't show empty user IPsec keys. 2010-11-03 10:26:12 -04:00
Ermal
9cb94dd46b Ticket #980. Bring CP widget up to date. Also bind lighty for CP to 127.0.0.1 it should not be accessible otherwise. 2010-11-03 13:25:54 +00:00
jim-p
6bc1e79a7d Don't use pconfig in a widget, it can cause issues with other widget settings. 2010-11-02 16:48:06 -04:00
jim-p
60e76c58df CSS changes, fixes misaligned cursor in some password fields. Fixes item 1 in ticket #830 2010-11-02 16:07:29 -04:00
jim-p
a6607b5fe0 More VPN log fixes, for consistency. Ticket #912 2010-11-02 15:14:11 -04:00
jim-p
b2b6130819 Switch from buttons to tabs, add a mode to view raw mpd logs for each vpn type, and some general cleanup. Fixes #912 2010-11-02 14:11:55 -04:00
jim-p
fbeaba6614 Remove these now-obsolete linkup/linkdown scripts. 2010-11-02 13:22:49 -04:00