mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
23,726 Commits 27 Branches 53 Tags 494 MiB
e75a787fca
Commit Graph

23726 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dmitriy K.
bfa22b1512 Update vpn_openvpn_server.php 
removed comments
 2014-06-20 19:59:16 +04:00
Dmitriy K.
34c0adfc59 Update vpn_openvpn_client.php 
removed comments
 2014-06-20 19:56:29 +04:00
Dmitriy K.
0e678da763 Update openvpn.inc 
Removed unnecessary "else {";
 2014-06-20 18:57:06 +04:00
jim-p
9f5de694da Merge pull request #1239 from phil-davis/patch-9 2014-06-20 10:25:40 -04:00
Renato Botelho
052dfa9346 Remove extra data after space and fix pf rule syntax. It should fix #3688 2014-06-20 10:36:01 -03:00
Renato Botelho
df203cb81d Merge pull request #1218 from razzfazz/nat_add_missing_protocols_master 2014-06-20 09:35:44 -03:00
Renato Botelho
96fcabaae3 Replace some backticks by exec ans simplify commands 2014-06-19 16:29:57 -03:00
Renato Botelho
692c21fd37 Remove more backtick abuse 2014-06-19 16:20:00 -03:00
Renato Botelho
3f0c20c3cd Add -n for 2 remaining sysctl calls, also replace backtick by exec 2014-06-19 15:58:06 -03:00
Renato Botelho
c69d32f65d Add full path for dmesg and replace backtick by exec 2014-06-19 15:57:42 -03:00
Renato Botelho
902da38805 Remove also . and / from graph 2014-06-19 13:04:57 -03:00
Renato Botelho
bc27c6d1ee Remove more backticks 2014-06-19 12:29:34 -03:00
Renato Botelho
57627d9f31 Fix status_rrd_graph_img.php and also improve it: 
- Remove escapeshellarg that broke command line
- Only remove dangerous chars to avoid command injection
- Replace all `hostname` calls by php_uname('n')
- Replace all `date` calls by strftime()
- Add $_gb to collect possibly garbage from exec return
 2014-06-19 12:26:57 -03:00
Renato Botelho
bef1056048 Make sure single quotes are encoded and avoid javascript injection 2014-06-19 11:30:38 -03:00
Renato Botelho
daeab6c453 Fix indent and whitespaces 2014-06-19 11:29:40 -03:00
Phil Davis
a43c5bdea7 Only include a scheduled rule if it is strictly before the end time 
The exact moment of the end time is the end of the schedule. We do not want to include a rule when filter_configure_sync wakes up at 00:15:00 etc and is on a not-slow system that processes this code during the interval 00:15:00 to 00:15:01. This should help intermittent issues with schedules not finishing at the appropriate 15-minute boundary. Might help or fix #3558
 2014-06-19 10:32:05 +05:45
Renato Botelho
aba02f6560 Simplify logic, add some protection to user input parameters 2014-06-18 16:54:05 -03:00
Renato Botelho
f334f8bf3d Fix whitespaces and indent 2014-06-18 15:38:50 -03:00
Renato Botelho
bef9f697b5 We need to allow subdirectories under /usr/local/pkg, here is the proper fix 2014-06-18 13:46:23 -03:00
Renato Botelho
08f3032034 Change the option for webconfig login autocomplete from opt-in to opt-out, also bump config version and write a function to keep the current status on upgrades 2014-06-18 08:21:27 -03:00
Renato Botelho
16789caa90 Always set httponly attribute on cookies 2014-06-18 07:38:24 -03:00
jim-p
56bd203593 Fix syntax error 2014-06-17 21:37:17 -04:00
Renato Botelho
2b641a08ab Protect servicestatusfilter parameter with htmlspecialchars() 2014-06-17 15:13:51 -03:00
Renato Botelho
e4921058c6 Protect rssfeed parameters with htmlspecialchars() 2014-06-17 14:53:58 -03:00
Renato Botelho
526f5b114a Add comment I forgot on last commit 2014-06-17 14:28:00 -03:00
Renato Botelho
8588095f85 Re-generate session ID on a successful login to avoid session fixation 2014-06-17 14:27:00 -03:00
Renato Botelho
5de32d520b Avoid directory traversal on restorefullbackup 2014-06-17 13:47:29 -03:00
Matt Smith
b67cdd05ab Fix core dump on viewing invalid package log 2014-06-17 11:37:26 -05:00
Renato Botelho
7145cd87d1 Remove . and / from pkg name to avoid directory traversal 2014-06-17 11:17:23 -03:00
Renato Botelho
c3936caf80 Remove id=0 from miniupnpd menu and shortcut 2014-06-17 10:48:31 -03:00
Renato Botelho
69eb2e295f Avoid directory traversal when reading package xml files, also check if file exists before try to read it 2014-06-17 10:33:18 -03:00
Renato Botelho
d09ff9ef32 Make sure variables are escaped, also replace exec calls to run rm by unlink_if_exists() 2014-06-17 10:19:54 -03:00
Renato Botelho
65eb0f61a4 Remove useless code, variable is set again on next line 2014-06-17 10:19:52 -03:00
Renato Botelho
45438fd3fd Escape parameters passed to shell_exec() 2014-06-17 09:40:27 -03:00
Renato Botelho
76c4ff0ecf Be more careful with host parameter and make sure it's escaped when call shell functions 2014-06-17 09:31:37 -03:00
Renato Botelho
65f815dd9f Validate starttime and stoptime format 2014-06-17 07:33:46 -03:00
Dmitriy K.
c7264382be Default values for verb if it is not set when edit 2014-06-17 11:38:05 +04:00
Dmitriy K.
caf58ced52 a bit of refactoring 
forgot to sync _server.php with _client.php naming style
 2014-06-17 11:09:08 +04:00
Dmitriy K.
b9e9903ddb patchpack1 
-Fix #3401 (Added tun option "Disable IPv6"
-Added new options: route-nopull, route-noexec, verb;
 2014-06-17 11:01:48 +04:00
N0YB
2464e35341 XHTML Compliance - System Menu 
Enforce select option
 2014-06-16 15:14:16 -07:00
Renato Botelho
7860191a10 Create some symlinks inside pbi dir to reduce differences between 2.1 and 2.2 and avoid the need to change a lot of PBI scripts 2014-06-16 15:10:20 -03:00
jim-p
ef462f2580 Make the byte counts on OpenVPN status human readable rather than huge unformatted numbers. 2014-06-16 14:00:00 -04:00
N0YB
b4e9a4da0f XHTML Compliance - System Menu 
Advanced - Admin Access Tab
Advanced - Firewall / NAT Tab
Cert Manager - Certificate Revocation Tab
User Manager - Users Tab
User Manager - Groups Tab
 2014-06-16 00:14:10 -07:00
N0YB
959c12cf54 Remove Status Verbiage. Consumes too much realestate in widget. Status icon without the verbiage is sufficient in widget view. 2014-06-15 02:50:58 -07:00
N0YB
f1a347906c Hostnames are not case restrictive. 2014-06-14 17:36:53 -07:00
Adam Gibson
01deca6a7c Log pfsense version to syslog after bootup 2014-06-14 02:52:45 -04:00
Renato Botelho
bc3885336d Avoid keeping old files from previous sessions on /tmp/configbak 2014-06-13 17:46:08 -03:00
Renato Botelho
828da37032 cf/ dir is removed below, do not need to remove the file here 2014-06-13 16:13:12 -03:00
Renato Botelho
dc86f24d72 Fix path for trigger_initial_wizard 2014-06-13 16:08:15 -03:00
N0YB
061ac3f364 Better string check 2014-06-13 11:11:48 -07:00