Commit Graph

22574 Commits

Author SHA1 Message Date
Renato Botelho
e41ab9aa32 Escape parameters passed to shell_exec() 2014-06-17 09:40:06 -03:00
Renato Botelho
ee4ba9fba1 Be more careful with host parameter and make sure it's escaped when call shell functions 2014-06-17 09:28:35 -03:00
Renato Botelho
54a9da9fce Validate starttime and stoptime format 2014-06-17 07:34:03 -03:00
Renato Botelho
e7eeb5ceac Do not expire already disabled users, it fixes #3644 2014-06-12 09:31:12 -03:00
Renato Botelho
f5629ea6b8 Be more precise to match members of a bridge interface, it should fix #3637 2014-06-10 14:21:16 -03:00
Renato Botelho
b2821f7df2 Revert "Revert "Fix #3700 and other syntax issues:""
This reverts commit 4cc2ae78d3.
2014-06-10 11:28:27 -03:00
Renato Botelho
ab3c1e240b Revert "Fix sh syntax"
This reverts commit cd49f9cd5d.
2014-06-10 11:28:21 -03:00
Renato Botelho
cd49f9cd5d Fix sh syntax 2014-06-10 10:54:56 -03:00
Renato Botelho
4cc2ae78d3 Revert "Fix #3700 and other syntax issues:"
This reverts commit e912bfae18.
2014-06-10 10:54:24 -03:00
Renato Botelho
e912bfae18 Fix #3700 and other syntax issues:
- Remove -G parameter from pfctl since it doesn't exist anymore
- Initialize $old_router
- Fix sh syntax on variable assign, it couldn't have space before =
- Simplify logic
- Avoid flush states twice, if it was done on IP change, don't do it
  again if router also has changed
2014-06-10 10:40:33 -03:00
Renato Botelho
6da518fcee Do not allow interface group name to be bigger than 15 chars, helps ticket #3208 2014-06-09 15:32:24 -03:00
Renato Botelho
ad03afb62a Escape argument on call to is_process_running too, also remove some unecessary mwexec() calls 2014-06-06 11:54:05 -03:00
Renato Botelho
4cc342453c Add some protection to parameters that come through _GET 2014-06-06 11:53:21 -03:00
jim-p
cbf16c3020 Escape this before running. 2014-06-06 08:26:26 -04:00
Renato Botelho
3bbc23b80d Bump version to 2.1.4 2014-06-05 15:36:53 -03:00
Renato Botelho
764ac8c73a Fix #3691, use curl instead of fetch to download update files 2014-06-05 08:55:24 -03:00
Matt Smith
466cabedd6 allow ipaliases to be configured on lo0 2014-06-03 13:18:57 -05:00
Chris Buechler
bc76b18eb9 remove openbgpd bits from system_gateways_edit and system.inc. The package
match is case-sensitive and hasn't matched the openbgpd package's name in
at least 5 years, so it doesn't do anything. It's far from functional in
any useful manner even fixing that issue.
2014-05-30 19:57:51 -05:00
jim-p
7d363e57a0 client-config-dir is also useful when using OpenVPN's internal DHCP while bridging. 2014-05-30 08:45:43 -04:00
Renato Botelho
268258b5aa Unset iflist and iflist_disabled 2014-05-29 10:53:28 -03:00
Renato Botelho
22ed6e3eab Show disabled interface when it was already part of interface group, it avoids to show a random interface instead and let user to add it by mistake. It should fix #3680 2014-05-29 08:53:05 -03:00
Manuel Silvoso
1930a63e81 Convert protocol ssl:// to https:// when creating http headers 2014-05-28 17:48:54 -03:00
jim-p
d62a265c91 Properly handle this rename, and squelch errors if it fails. 2014-05-21 13:30:23 -04:00
Renato Botelho
8d6c5f6621 Delete all ip aliases when interface is disabled, it should fix #3650 2014-05-21 14:22:11 -03:00
Chris Buechler
38f6f50a84 fix variable typo. ticket #3669 2014-05-20 22:57:38 -05:00
jim-p
c42a35e54a /etc/version_kernel and /etc/version_base no longer exist, use php_uname to get the info instead. 2014-05-16 13:11:24 -04:00
Chris Buechler
ad57eacf87 add guiconfig to widgets not including it. ticket #3498 2014-05-14 10:37:29 -05:00
Chris Buechler
d3fa8a8775 remove text not relevant to Allowed IPs. Ticket #3594 2014-05-14 10:27:11 -05:00
Renato Botelho
29282ddc09 Merge pull request #1131 from razzfazz/make_upnp_listen_on_if_optional 2014-05-09 14:57:17 -03:00
Renato Botelho
91946ea44d Merge pull request #1130 from razzfazz/status_upnp_int_port 2014-05-08 18:41:20 -03:00
Renato Botelho
7e736f3850 Fix #3646, Revert part of 082c9d961e and fix highlight selected rules 2014-05-08 07:50:07 -03:00
Daniel Becker
d973a602ab make listening on interface rather than IP optional for miniupnp 2014-05-06 17:27:36 -07:00
jim-p
d0f365c277 Remove units from burst as it is always specified in bytes. (Per ipfw(8)).
Worked for me in testing, I watched a file briefly burst until and then be clamped down to the limiter's rate.
2014-05-06 16:09:52 -04:00
Daniel Becker
a0dd23e0dc add column for internal port on UPnP status page 2014-05-05 15:35:32 -07:00
Ermal
4ec6b54d18 Merge the forgotten Ticket #3062 patch for CP pipeno leaking issue which leads to the 'Maximum login reached' on CP 2014-05-03 16:27:28 +00:00
Ermal
4e1b06aac4 Put .hushlogin even here to not be done from tools repo. Maybe some people would like to have that on rmlist. 2014-05-01 15:17:39 -03:00
Ermal
c79f330d35 Move the sh/profile files here as a more natural place to live in. 2014-05-01 15:14:55 -03:00
Renato Botelho
5216e3591c Obsolete old clog binary from /usr/sbin 2014-05-01 13:32:06 -03:00
Ermal
188b3b8842 Merge pull request #1127 from phil-davis/patch-6 2014-05-01 09:37:12 +00:00
Phil Davis
b6ba57f67e Fix Bug #3627 Diagnostics: Tables - Remove button dont work after update to PfSense 2.1.2
This annoyed me also, so I thought it worth finding what changes exactly broke this.
del_entry was broken on 2.1 branch by fe3088b965
These 2 small changes make it work again without needing to reverse the other bits of stuff in that commit.
Note that Master does not have that commit at all. There are lots of these "XHTML Compliance" and similar commits in 2.1 branch that are not done in master. I don't understand why that is. Why don't those code cleanups also need to be applied to master?
2014-04-30 22:45:18 -07:00
Renato Botelho
25f7f72574 Bump version to 2.1.3-RELEASE 2014-04-30 18:13:35 -03:00
Ermal
4d076356d5 Take care of interfaces that have no ip but might be part of the bridge as done for openvpn to avoid loops 2014-04-30 18:41:12 +00:00
Ermal
6657d23cff Signal a reload if anything got updated 2014-04-30 06:50:35 +00:00
Ermal
2392ed60f3 Merge the patch suggested in Ticket #3629. It also Fixes #3629. The question is why this is using config lock? Also where is filter configure called here? 2014-04-30 06:48:06 +00:00
Renato Botelho
19166f7d2d Check the right field here 2014-04-29 15:36:33 -03:00
Renato Botelho
2ae503264c Unbreak 'add rule on top of the list' allowing after param to be -1 2014-04-29 14:56:49 -03:00
Renato Botelho
2db29614d2 Move clog from /usr to /usr/local
Conflicts:
	etc/inc/filter_log.inc
	etc/inc/system.inc
	etc/rc
	usr/local/www/guiconfig.inc
2014-04-28 11:56:06 -03:00
Ermal
dc5c69f122 Correct the ridirection URL to unbreak ones passed through Radius attributes and repsect user choices. Reported-by: Antoine Guillemot 2014-04-28 08:27:56 +00:00
Ermal
a6711d23f8 Merge pull request #1122 from razzfazz/miniupnp_listen_on_interface 2014-04-28 07:15:04 +00:00
Daniel Becker
b1c9aff653 make miniupnpd listen on interface instead of IP
The 'listening_ip' option in miniupnpd.conf can accept an interface name
directly instead of having to translate it to an IPv4 address first. (This is
actually required if IPv6 support is enabled.)
2014-04-27 16:09:50 -07:00