Commit Graph

12752 Commits

Author SHA1 Message Date
jim-p
d2d45b5fd4 Encode cert/ca descr in system_advanced_admin.php 2015-07-01 11:10:48 -04:00
jim-p
0d6b017b28 Encode cert/ca descr in services_captiveportal.php 2015-07-01 11:08:39 -04:00
jim-p
ae142a1049 Encode ca/cert info in openvpn_wizard.inc 2015-07-01 11:06:25 -04:00
N0YB
763afdaf7b Add semicolon
Fix delete Java Script to match valid HTML ID
2015-06-25 08:32:40 -03:00
N0YB
0f383d78a0 XHTML Compliance
html id's not permitted to begin with a number.
html id's not permitted to contain '/'
add prefix (entry_) and replace slash with hyphen.
table entry id format becomes: entry_<ip address>-<cidr>
replacing the format: <ip address>/<cidr>
does not change the displayed format.
2015-06-25 08:31:38 -03:00
Renato Botelho
a3918e5999 Move pt_BR translation from ISO to UTF-8 2015-06-19 15:31:50 -03:00
Renato Botelho
6b42b02cc0 Move pt_BR directory, it's moving from ISO to UTF-8 2015-06-19 15:29:28 -03:00
Ermal LUÇI
fabb4b0321 Ticket #4746 Correctly set global variables to be used by hostnames cod epaths 2015-06-19 17:33:19 +02:00
jim-p
9e8ce1e25b Add a GUI field to increase the pf frag entries limit. Fixes ticket #4775 2015-06-18 09:30:10 -04:00
Phil Davis
bc8adf7e03 Say what is happening when reinstalling package GUI XML
At the confirmation dialog after pressing the "Reinstall XML" button, the text does not distinguish between having pressed "Reinstall the whole package" and "Reinstall the GUI/XML". It would be nice if the text of this confirmation allowed the user to be confident about which button they had just pushed, before confirming the action.
Note: This stuff has no gettext() wrappers - but that can be fixed later, not get mixed up in this.
2015-06-16 12:44:40 -05:00
jim-p
f128ee2224 Remove load_balancer_relay_* -- They are not used, not linked, not functional, not maintained, and have potential security issues. 2015-06-16 13:41:12 -04:00
Phil Davis
4fabdca76a Why is break missing for reinstallxml
I thought that "reinstallxml" should do less than "reinstallpkg" but actually it was getting stuff here, then falling through "reinstalpkg" which did delete_package_xml and then install_pkg, which got the files a 2nd time and...
Maybe that was supposed to happen?
Anyway, I thought I would point this out and someone can either commit this pull request if the "break" should be there, or explain to me why "reinstallxml" is supposed to fall through executing all this code.
2015-06-16 12:40:44 -05:00
jim-p
e988576343 Encoding in services_unbound_advanced.php 2015-06-16 12:11:13 -04:00
jim-p
de5f0b6122 Encoding in system_advanced_sysctl.php 2015-06-16 12:00:51 -04:00
jim-p
0ec282d488 Encoding in interfaces.php 2015-06-16 11:54:27 -04:00
jim-p
d674c38db2 Encoding in services_unbound.php 2015-06-16 11:45:34 -04:00
jim-p
3642b3489d Encoding in pkg_mgr_settings.php 2015-06-16 11:41:13 -04:00
jim-p
1d92e91f9b Encoding in system_advanced_admin.php 2015-06-16 11:37:53 -04:00
jim-p
faa9164224 Encoding in interfaces_ppps_edit.php 2015-06-16 11:34:55 -04:00
jim-p
f4bbd64dec Encoding in diag_packet_capture.php 2015-06-16 11:30:16 -04:00
jim-p
9162143f12 Encoding in interfaces_qinq_edit.php 2015-06-16 11:27:06 -04:00
jim-p
e959a567e5 Encoding in services_dnsmasq.php 2015-06-16 11:18:42 -04:00
jim-p
7a29e65427 Encoding in vpn_ipsec_settings.php 2015-06-16 11:10:58 -04:00
jim-p
5ef9708e4d More encoding 2015-06-16 11:05:47 -04:00
jim-p
d213c48520 Fix some low-hanging potential security issues. 2015-06-16 10:53:04 -04:00
jim-p
621baeb604 Be more careful with encoding on pages that use single quotes around HTML attributes 2015-06-16 10:13:09 -04:00
jim-p
6dbe58e101 Additional encoding for system_advanced_misc.php 2015-06-16 09:24:11 -04:00
jim-p
1a44770de9 Protect single quotes as well to prevent JS injection, due to the way this page uses single quotes for attributes. 2015-06-16 09:11:47 -04:00
jim-p
2a1b44c96e Encode parameters in system_advanced_firewall.php before displaying back to the user. 2015-06-16 08:56:05 -04:00
Ermal LUÇI
6d85358c94 Merge manullay pull/1722 2015-06-15 18:18:41 +02:00
Ermal LUÇI
4d474c094f Remove the GUI for the pc-sysinstaller as well and add it to obsoletee files 2015-06-15 16:50:16 +02:00
Ermal LUÇI
353cd8165e Remove pc-sysinstall since it was never finished and probably will be not the choice. If needed can be resurrected. It already is in obsoleted files 2015-06-15 16:48:16 +02:00
Phil Davis
6622518b15 status_queues missing semi-colon
This really looks like it should have a semi-colon. Somehow the PHP interpreter is not being fussy about it in this context, I guess being followed by the "endif;" keyword the interpreter guesses the previous statement must be done.
2015-06-15 09:34:07 -05:00
Ermal LUÇI
da6faa2b57 Ticket #4655 well manually merge pull/1715. Thanks: Phil 2015-06-15 02:58:24 +02:00
Chris Buechler
fd90a77fdf add input validation for proxy URL, port, user. 2015-06-14 00:48:55 -05:00
Ermal LUÇI
d6084ab02f Ok another round of this which unbreaks input error validation messages 2015-06-13 14:35:43 +02:00
Ermal LUÇI
60fc27e0aa Make this right finally :). Thanks-ti: Phil-davis 2015-06-12 20:35:05 +02:00
Ermal LUÇI
7144515b87 Activate the redirection that for some reason got disabled 2015-06-12 17:36:34 +02:00
Ermal LUÇI
1c7fd09e4d Ticket #4655 Do not behave against the logic of checkbox and description. 2015-06-11 23:56:55 +02:00
bruno
be37ac8f19 fix checking for overlaps of NAT destination port 2015-06-11 15:18:26 -04:00
Ermal LUÇI
2e7ea1074a Make the host uuid opt-out 2015-06-11 03:46:48 +02:00
Renato Botelho
7a923e09da Re-generate broken .mo files, it fixes #4705 2015-06-07 13:40:00 -05:00
Renato Botelho
422fabbcdf Remove duplicate message 2015-06-07 13:39:42 -05:00
jim-p
0e7653f480 Clean up, organize, and expand the info presented by status.php. Save the output to individual text files and compress them into a .tgz for later download. 2015-06-05 16:33:49 -04:00
jim-p
1557716b7c Also sanitize OpenVPN static/tls keys in status.php 2015-06-05 08:22:06 -04:00
Phil Davis
dc6695c3f4 Setup Wizard can result in invalid LAN DHCP pool calculation
1) consider where the LAN IP is in the subnet range and then put the
DHCP pool in the biggest remaining segment, either above or below.
2) Check the size of the available segment. If it is reasonably big then
leave some space at either end of the segment, like the old code was
doing. Otherwise give all the space to the pool.
3) Do not allow subnet mask 32 - I can't think of a use case for LAN to
have a /32 subnet mask, it kind of breaks the whole concept of LAN.
4) Provide more detailed separate messages if the user tries to use the
network address or broadcast address as the LAN IP.
2015-06-04 17:08:11 -03:00
Phil Davis
b3bba7fe13 Improve setup wizard host name check
Redmine #4712
It seems good enough to make the regex strings here be "reasonable". The full checks are done after pressing Next and the correct routines are called that do an exhaustive check. There seems not much point in trying to re-engineer all that here also.
Odd things like "-hostname" and "hostname-" would be allowed through here but are caught by the full validation check.
"." and "|" were being allowed in this regex - no idea why!
2015-06-04 17:06:31 -03:00
Phil Davis
b7cf171b52 Minor wizard text fixups 2015-06-02 08:33:58 -03:00
Phil Davis
379dc6f236 Supply current WAN gateway name to wizard
As the name of the WAN gateway is not always WANGW.
Should fix redmine #4713
2015-06-02 08:33:48 -03:00
Chris Buechler
796cc21860 Clarify DNS Forwarder and Resolver both apply in these places. partially Ticket #3730 2015-06-02 01:22:26 -05:00