Commit Graph

62 Commits

Author SHA1 Message Date
Vinicius Coque
86cf36813d making small fixes on jQuery code 2012-01-21 18:08:09 -02:00
Vinicius Coque
d6159f76fb Scriptaculous / prototype replaced by jQuery 2012-01-15 12:53:51 -02:00
jim-p
4fbc8429be Only do cookie check if the form has already been posted. The cookie check is not accurate for the first page load after a browser has been opened, has to be at least one refresh/post first. 2011-09-02 13:03:33 -04:00
jim-p
0041092cbf If a user's browser does not support cookies, print an error on the login form telling them so.
Conflicts:

	etc/inc/authgui.inc
2011-08-31 14:46:39 -04:00
jim-p
0d4f348f17 Log when a user tries to access an unauthorized page. 2011-08-10 10:40:36 -04:00
jim-p
8b6313a4d3 Merge remote-tracking branch 'upstream/master'
Conflicts:
	etc/inc/easyrule.inc
	etc/inc/filter.inc
	etc/inc/interfaces.inc
	etc/inc/services.inc
	etc/inc/xmlrpc_client.inc
	usr/local/www/fbegin.inc
	usr/local/www/services_dhcp.php
2011-07-12 19:57:42 -04:00
Vinicius Coque
3cfc695c36 Fix gettext 2011-07-11 09:58:06 -03:00
Vinicius Coque
d21d6e2090 Merge remote-tracking branch 'mainline/master' into inc
Conflicts:
	etc/inc/interfaces.inc
	etc/inc/upgrade_config.inc
	etc/inc/vpn.inc
2011-05-23 15:41:26 -03:00
Seth Mos
69be9601ac Merge remote branch 'upstream/master'
Conflicts:
	etc/inc/vslb.inc
	etc/version
2011-05-13 13:43:37 +02:00
jim-p
1031c9ea76 Make autocomplete on the login form optional. 2011-05-12 10:45:30 -04:00
Vinicius Coque
54bdff758f Merge remote-tracking branch 'mainline/master' into inc
Conflicts:
	etc/inc/auth.inc
	etc/inc/config.lib.inc
	etc/inc/filter.inc
	etc/inc/pfsense-utils.inc
	etc/inc/pkg-utils.inc
	etc/inc/priv.defs.inc
	etc/inc/services.inc
	etc/inc/shaper.inc
	etc/inc/voucher.inc
	etc/inc/vpn.inc
	usr/local/www/fbegin.inc
2011-03-25 08:49:04 -03:00
Seth Mos
2c1b25d681 Merge remote branch 'upstream/master' 2011-02-10 16:08:07 +01:00
jim-p
0fc6be3f54 Allow autocomplete on login form (Fixes saving password on Firefox and Chrome) 2011-02-10 09:44:00 -05:00
Seth Mos
f48d337f88 Add ipv6 local addresses to the IP address list for the rebinding check 2010-11-12 22:45:21 +01:00
Scott Ullrich
4fe9c2dcf1 * Adding function get_configured_ip_addresses() which returns all interfaces and their configured IP address
* Add checkbox to System -> Advanced -> Admin for HTTP_REFERER checks
* Add and enforce HTTP_REFERER check if checkbox is not checked.

This will prevent HTML pages from crafting HTML GETs against the web interface and will prevent firewall admins from being "tricked" into clicking on links that may be harmful to their firewall.
2010-11-10 11:56:23 -05:00
Renato Botelho
10f0a57ab4 Merge remote branch 'mainline/master' into inc
Conflicts:
	etc/inc/authgui.inc
2010-10-11 12:53:20 -03:00
Erik Fonnesbeck
28436d13e5 Fix text. 2010-10-10 23:52:31 -06:00
Warren Baker
c3f4734da7 Wording fix. 2010-10-10 14:47:39 +02:00
Renato Botelho
addc043993 Fix quotes to use %N$X on gettext calls 2010-10-01 10:17:13 -03:00
Renato Botelho
47f12397b3 Fix gettext calls with printf to permit change strings order 2010-08-30 20:36:30 -03:00
Carlos Eduardo Ramos
0b70d9f421 Implement gettext() calls on authgui.inc 2010-08-13 13:52:39 -03:00
Scott Ullrich
6cfa23eb6e No need to use # in color code, it's already set with this 2010-07-14 17:41:43 -04:00
Scott Ullrich
f31489e5b6 Allow overriding the Nifty corners background color 2010-07-14 17:36:26 -04:00
Scott Ullrich
067e48abda Handle VIP DNS-Rebinding detection correctly 2010-07-14 15:17:32 -04:00
jim-p
d2c89b6207 Fix this function call, it only takes one parameter. 2010-07-13 10:36:44 -04:00
jim-p
2003b5d8bc Print a warning on the login screen if you are accessing the router by a non-local IP address (one not configured on the system) to warn about potential MITM attacks. 2010-07-09 09:50:01 -04:00
Ermal Lui
6306b5ddc7 Overhaul the user login system to use the Servers tab as its base.
Fix quite a few problems down the way.
2010-03-03 16:17:35 +00:00
sullrich
5c15e649a1 Recommit #161 changes. It appears a different commit has broken firewall rules edit and firewall nat edit. 2009-12-03 20:31:23 -05:00
sullrich
c9dddd598b Revert "Redirect to / when logging in to avoid posting to forms accidently and clearing the form and causing all kinds of chaos. Ticket #161"
This reverts commit 6af7c40b29.
2009-12-03 20:17:20 -05:00
sullrich
6af7c40b29 Redirect to / when logging in to avoid posting to forms accidently and clearing the form and causing all kinds of chaos. Ticket #161 2009-12-03 20:14:36 -05:00
sullrich
f5bdff7fbe Add priv.defs.inc to authgui.inc 2009-12-03 16:26:30 -05:00
sullrich
53b305053d Set 2nd parameter for isAllowedPage. Will be required for #34, 33, 32 2009-12-02 22:47:43 -05:00
Scott Ullrich
483e6de842 Rework includes/require. This saves about 4 megabytes.
Simplify get_memory(). Tested on mips/i386
2009-11-21 16:08:36 -05:00
Scott Ullrich
523855b02b Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions 2009-09-12 15:34:07 -04:00
Ermal Luci
6dc88d5352 * Move functions that output html to guiconfig.inc
* Remove some recursive dependency on some includes
* Remove ^M or \r from files
* Remove some entries from functions.inc to avoid including them twice
* Remove some unneccessary includes from some files

NOTE: There is some more work to be done for pkg-utils.inc to be removed from backend as a dependency.
2009-06-18 12:40:11 +00:00
Bill Marquette
e7d9eea6f1 Set focus to the username field 2009-03-12 23:03:18 -05:00
Ermal Luçi
403a270ec8 Fix the case when users without access to index.php get an error message.
This redirects the users to the first allowed pagge if they do not have access to index.php and errors out only if no page has been assigned to them.

NOTE: It is strange that a user cannot change its password!
2008-11-22 18:39:46 +00:00
Matthew Grooms
d97ab68861 Cleanup some of the authentication code. Fix the problem where you must
navigate away from the initial page twice to get somewhere. Remove some
of the cruft that was no longer used. Don't unconditionally redirect a
user to their homepage if another url was specified pre-login. This will
allow admins to create bookmarks to specific pfsense webui pages.
2008-09-03 20:33:06 +00:00
Matthew Grooms
659fa7f23b Cleanup authentication code. The basic auth method, the passwd, htpasswd
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named
local_backed has been added that authenticates to the local configuration
info which should be identical to system pwdb credentials. Since the
htpassword file is no longer required, sync_webgui_passwords and its
wrapper function system_password_configure have been removed.

The local account management functions were renamed for consistency. A few
minor bugs related to setting local passwords have also been corrected.
2008-08-03 17:54:35 +00:00
Matthew Grooms
45ee90edb3 Rewrite portions of the user manager to ensure data is properly synced to
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions
that were only being used in one place or not at all were removed. The
user page privelege checks were also simplified in preperation for future
work in this area.
2008-07-25 02:28:31 +00:00
Chris Buechler
9d23d1feb4 fix IE login
Ticket #1707
2008-07-13 23:49:07 +00:00
Holger Bauer
1651332480 Make loginpage more themeable. Only theme that uses this so far is the_wall. Other themes look ugly now (only loginpage) but are usable. Will be fixed within the next day(s). 2008-04-05 03:59:44 +00:00
Scott Ullrich
990dc9cecf * Remove blank trailing line
* Allow custom urls that include pkg.php to be saved
2008-02-16 21:26:57 +00:00
Scott Ullrich
4989bc6624 Latest LDAP changes from Mark Batchelor 2008-02-03 03:19:45 +00:00
Scott Ullrich
4382963875 * Remove trailing blank line
* Make sure $search has data before operating on it
2008-02-03 01:47:48 +00:00
Scott Ullrich
b0ed07d189 Latest eDir / Active Directory tweaks from Mark Batchelor.
Thanks again for him helping us with this project!
2008-01-31 18:16:40 +00:00
Scott Ullrich
2f650197fb * Missing =
* Allow user manager to adhere to admins group
2008-01-01 00:06:18 +00:00
Scott Ullrich
7e4a4513a3 Allow multiple groups to be assigned per user.
Work sponsored-by: Centipede Networks
2007-12-28 02:36:31 +00:00
Scott Ullrich
0360823f5d Adding LDAP backend glue.
Work sponsored-by: Centipede Networks <http://centipedenetworks.com/>
2007-12-27 19:39:21 +00:00
Scott Ullrich
bdefdc369c Store global privs list in $g['privs'] 2007-12-03 01:20:19 +00:00