Commit Graph

3809 Commits

Author SHA1 Message Date
Scott Ullrich
2701e257ce IE7 graph fixes.
Obtained-from:m0n0wall
2008-03-03 01:26:46 +00:00
Scott Ullrich
f98b71e57b Use escapeshellarg() instead of htmlentities() 2008-02-26 17:34:52 +00:00
Scott Ullrich
c5733422af Guard against javascript injection attacks
Ticket #1656
2008-02-22 00:11:58 +00:00
Chris Buechler
711ee16474 fix typo 2008-02-18 05:12:57 +00:00
Scott Ullrich
612b579a6d Do not destory CARP interface, simply delete it to avoid FreeBSD panics. 2008-02-16 22:40:00 +00:00
Chris Buechler
79ec2fe165 touch up text 2008-02-16 08:55:35 +00:00
Chris Buechler
ebcd8b53bd clarify text 2008-02-16 08:44:18 +00:00
Scott Ullrich
667889e740 Close off XSS execution hole.
Submitted-by: Charles Hooper
2008-02-14 22:14:05 +00:00
Scott Ullrich
d5d2c5145a * Add xmlrpc declarations missed in last commit
* MFC exec_shell() package related function
* MFC exec_php() package related function
2008-02-14 04:57:31 +00:00
Scott Ullrich
cdcb273e5e * Add merge_installedpackages_section_xmlrpc() call used for merging
specific <installedpackages><AREANAME> sub items without replacing
  the entire <installedpackages> area with just this item
* Adjust TinyDNS sync to use this new method to avoid replacing the
  entire destination <installedpackages> area which also whipes
  out all other installd package information.
2008-02-14 04:27:56 +00:00
Chris Buechler
ac65e36e9f touch up text
Ticket #1644
2008-02-14 02:32:40 +00:00
Chris Buechler
36362c616d touch up text
Ticket #1644
2008-02-14 02:25:44 +00:00
Chris Buechler
3d897248d2 fix typo
Ticket #1645
2008-02-12 23:06:28 +00:00
Scott Ullrich
b5aebbf5d1 Make scripts XSS input safe.
Pointed-out: by hoopercharles@gmail.com
2008-02-12 04:33:24 +00:00
Chris Buechler
6c13d55182 touch up text
Ticket #1627
2008-02-07 23:56:18 +00:00
Scott Ullrich
b5c12e7b11 Do not show Apply button twice. 2008-02-06 00:10:08 +00:00
Scott Ullrich
8dd629d06b Correctly deterimine if /boot/loader.conf exists. 2008-02-05 17:40:18 +00:00
Chris Buechler
62d3ad831c Prevent users from entering queue names that break the ruleset
sort of related to Ticket #1612
2008-02-03 06:00:59 +00:00
Chris Buechler
a8e5fc7ffb Trim long interface names to prevent broken rulesets.
Ticket #1612
2008-02-03 05:47:06 +00:00
Chris Buechler
fcc2fc6c3c shorten description field to prevent creating rulesets that won't load.
Ticket #1619
2008-02-03 04:37:29 +00:00
Scott Ullrich
2eaa947d17 Lower threshold to 86. Noticed a scenario where slbd was chewing up
roughtly 91% of the cpu.
2008-01-31 04:36:45 +00:00
Scott Ullrich
0e7fe2ade7 Cleanup if(). Remove additional save message. 2008-01-29 00:10:19 +00:00
Scott Ullrich
3b7abf1c4a Use ip_in_subnet() to correctly determineif we have a matching real ip
address defined somewhere before allowing the CARP address to be added.
2008-01-28 23:56:49 +00:00
Chris Buechler
ee9551786b touch up text
Ticket #1610
2008-01-27 20:48:10 +00:00
Scott Ullrich
276a350f68 When changing the IP address, reassign all static routes.
Tested-by: Gary Buckmaster via ORU
2008-01-22 21:31:41 +00:00
Chris Buechler
17912fda5d clarify wording in tabs to appropriately reflect purpose of these pages 2008-01-16 07:13:09 +00:00
Scott Ullrich
9d8a09fad2 Only process /boot/loader.conf if it exists avoiding a
somehwhat ugly looking error on cdrom boot.
2008-01-16 01:23:00 +00:00
Chris Buechler
695f801f92 touch up text
Ticket #1586
2008-01-12 19:03:31 +00:00
Chris Buechler
7e74b5bf4c touch up text
Ticket #1578
2008-01-11 04:14:23 +00:00
Chris Buechler
9ba4e2e3e7 touch up text
Ticket #1577
2008-01-11 03:58:29 +00:00
Chris Buechler
34b1223400 touch up text
Ticket #1576
2008-01-11 03:47:14 +00:00
Chris Buechler
fa17183fd8 remove unnecessary grep
Ticket #1573
2008-01-10 03:31:56 +00:00
Chris Buechler
5c99e8ef6f touch up text
Ticket #1569
2008-01-08 02:14:44 +00:00
Chris Buechler
d6528238b5 touch up text
Ticket #1569
2008-01-08 02:04:59 +00:00
Scott Ullrich
80e3d298fe Do not reset every hour. Wait until the process goes out of control. 2008-01-07 21:38:00 +00:00
Scott Ullrich
2f381b82fa Reapply patches from ticket #1532 2008-01-05 05:04:57 +00:00
Seth Mos
3214bd9a43 Use correct var 2007-12-28 11:53:04 +00:00
Scott Ullrich
8ea9996cd4 Pretent we are a little bit more secure and hide the password from folks
that can look over your shoulder.
2007-12-27 22:58:39 +00:00
Scott Ullrich
d4e32f54df Detect vmware and embedded platforms and lower the note duration
automatically.
2007-12-27 03:38:56 +00:00
Chris Buechler
f6f3b7e0a6 remove forced reboot, warn user a reboot may be required
Ticket #1555
2007-12-26 04:12:28 +00:00
Chris Buechler
124ea6b8a7 remove forced reboot, expand comment
Ticket #1555
2007-12-26 03:27:04 +00:00
Chris Buechler
41a140f836 fix typo 2007-12-26 03:08:33 +00:00
Chris Buechler
b73eda208e Revert broken OPT interface removal commit. This breaks configurations entirely, worse than just improperly shifting configuration items.
Ticket #1532
2007-12-24 07:44:26 +00:00
Chris Buechler
4297bc4954 fix typo
Ticket 1555
2007-12-24 07:08:01 +00:00
Scott Ullrich
995c37cb73 * Only output one error message or save notice at a time
* Correc the reboot workaround for kernel panics (CARP interface deletion)

Ticket #1397
2007-12-24 01:24:48 +00:00
Scott Ullrich
21ee235aec Alert the user that the firewall must be rebooted after VLAN changes
Ticket #1555
2007-12-24 01:15:38 +00:00
Scott Ullrich
09cb1861ce Do not corrupt output when a space is in the SSID name.
Ticket #1531
2007-12-24 01:10:12 +00:00
Scott Ullrich
0c361483f3 Remove ipv6 rule reminder statement
Ticket #1560
2007-12-24 00:47:32 +00:00
Scott Ullrich
0b1c5ff523 The original code did a mixed work: the part in interfaces_assign.php first renamed the interfaces, and then called cleanup_opt_interfaces_after_removal(). The latter didn't do anything at all: it never entered the loop, it didn't save the result of str_replace, it didn't save the resulting config after the processing. And if it had worked, it would have renamed the interfaces a second time as a side effect, completely messing-up the config.
Ticket #1532
2007-12-24 00:40:51 +00:00
Seth Mos
f71519044b Slow down the pipe even more 2007-12-21 15:27:32 +00:00