Erik Fonnesbeck
f02f0675cc
Ensure this is an array before entering the foreach loop. Fixes #1012
2010-11-16 18:38:44 -07:00
Ermal
aeaa735882
Make the pkg_fetch_recursive code stronger and try also to fetch from freebsd repo when fails to fetch from pfSense one.
2010-11-16 22:59:46 +00:00
Ermal
7b22832377
Avoid exec() and use php calls.
2010-11-16 22:38:49 +00:00
Ermal
1b28121fac
Correctly form the url from where to fetch packages if a base is not specified. This unbreaks packages on amd64! Also do no remove a package which is required by other installations.
2010-11-16 22:11:33 +00:00
Ermal
fe81116d43
Correct variable name.
2010-11-16 19:56:03 +00:00
Ermal
fcf92daec2
* Use pkg_info -E pkgname* for testing if a package is installed.
...
* Do not call eval if we cannot include an .inc file since that will make the whole script fail.
* Keep the log from the start to the end without overwriting. This makes debugging and problem reporting easy and explains what is done during installation.
* Check retrun value of download_with_progress_bar to make it possible catching errors during download.
* Lots of improvements in between
Related to Ticket #950
2010-11-16 19:40:20 +00:00
Ermal
55910da798
Tighten check even more. Ticket #1006 .
2010-11-16 16:29:02 +00:00
Ermal
b878ad364a
Ticket #1006 . Make sure to interpret the response as needed. First check if we got 0 and then check if we have a faultCode().
2010-11-16 16:21:49 +00:00
Erik Fonnesbeck
e6b960ccff
Make sure this isn't searching the referrer using a blank host or IP, which will always match the referrer.
2010-11-15 20:56:47 -07:00
Erik Fonnesbeck
55068970f2
Fix case for testing the referrer check setting. Ticket #1011
2010-11-15 20:35:30 -07:00
Ermal
efe259cfab
Remove these anchors they just provide overhead and are not really used much in pfSense.
2010-11-15 20:01:30 +00:00
Ermal
d268d45751
Remove gre helping rules they are not anymore needed.
2010-11-15 19:55:28 +00:00
Scott Ullrich
99b1cc43b3
Disable CSRF checks on the backup page.
2010-11-15 14:16:54 -05:00
Scott Ullrich
0dcdbc8573
Send errors to 2>
2010-11-15 13:50:56 -05:00
Scott Ullrich
64ec1ddf35
Add nocsrf flag
2010-11-14 14:46:35 -05:00
jim-p
364ecdd1ba
Fix misnamed form field on CRL import.
2010-11-14 14:29:26 -05:00
Erik Fonnesbeck
fbd96b06f5
Fix variable names. Ticket #954
2010-11-14 07:55:31 -07:00
Erik Fonnesbeck
bd32ac6cf1
Fix case of variable name for swap usage. Ticket #477
2010-11-14 06:59:41 -07:00
Erik Fonnesbeck
ba8e08709a
Copy /boot/loader.conf.local to the newly imaged slice. Ticket #892
2010-11-14 05:36:28 -07:00
Erik Fonnesbeck
0aa72c108d
Don't perform referer check if display_error_form is not defined (captive portal), just like as is done for the DNS rebind check. Ticket #1007
2010-11-14 04:05:40 -07:00
Erik Fonnesbeck
0532e54d93
Rework handling of ports for reflection on port forwards to work properly with port aliases. Ticket #672
2010-11-14 03:10:52 -07:00
Erik Fonnesbeck
856d2bf957
Unset this reference before reusing the variable name to prevent corruption of groups.
2010-11-13 23:06:34 -07:00
Scott Ullrich
ac50365306
Open link in new tab/window
2010-11-13 19:38:46 -05:00
Erik Fonnesbeck
bddc88183a
Form image buttons are submit buttons and thus default buttons, causing unwanted behavior with the enter key. Use links instead, where possible.
2010-11-12 22:44:11 -07:00
Erik Fonnesbeck
6f7a997828
Add style to rowhelper normal text fields in packages for consistency.
2010-11-12 20:05:15 -07:00
Ermal
21699e7642
Fix test for altq on vlans and wlan.
2010-11-12 23:51:15 +00:00
Scott Ullrich
83fcd140dd
CSRF startup code has been moved to guiconfig.inc
2010-11-12 18:34:51 -05:00
Scott Ullrich
fafd303ea9
Unbreak AJAX
2010-11-12 18:30:43 -05:00
Scott Ullrich
c895ab7b9d
Misc XSS fixes
2010-11-12 16:05:47 -05:00
jim-p
2bf0ada5ed
Protect against XSS by someone broadcasting an HTML SSID... (better to be safe...)
2010-11-12 12:29:53 -05:00
jim-p
f01d8c4951
One more potential XSS vector. Not sure how it would have text injected here, but better safe than sorry.
2010-11-12 12:15:14 -05:00
jim-p
060d4c5ec0
More notice XSS fixes.
2010-11-12 12:02:44 -05:00
Scott Ullrich
dd5bf424c1
Fix XSS issues
2010-11-12 11:36:20 -05:00
jim-p
4656943e59
Fix a theoretical/potential XSS in the http_referer check warning.
2010-11-12 11:35:02 -05:00
jim-p
190d5d5814
Fix XSS in notices.
2010-11-12 11:29:25 -05:00
Scott Ullrich
225a2f0b46
Bring in XSS id fixes from m0n0wall
2010-11-12 11:03:51 -05:00
Ermal
5812e717eb
Add whitespace to avoid breaking the resulting rule.
2010-11-12 11:53:27 +00:00
Ermal
f27789bf9c
Whitespace fixes.
2010-11-12 11:52:10 +00:00
Ermal
f829d53248
Make sure there is a direction specified otherwise errors might occur.
2010-11-12 11:51:09 +00:00
Ermal
9869cf3e25
Initialize rule keeping array to avoid possible caching effects on php.
2010-11-12 11:49:27 +00:00
Erik Fonnesbeck
19310a561a
Clarify these descriptions a bit more on 1:1 edit.
2010-11-12 02:17:29 -07:00
Scott Ullrich
a2f38ac4d4
Handle AJAX
2010-11-11 09:17:56 -05:00
Warren Baker
6f567a593d
NiftyCheck already included in bottom-loader.js otherwise div mainarea gets rounded twice.
2010-11-11 12:51:56 +02:00
Erik Fonnesbeck
cea355a54d
Separate this into the original case with the floating rule cases above it to fix some scenarios where the order was still wrong.
2010-11-11 02:53:35 -07:00
Erik Fonnesbeck
cb53651f67
Small rework of code for applying drag and drop reordering of rules and some extra checks added to fix some potential bugs. Ticket #878
...
Also minimizes the extent of the changes performed (useful when comparing config.xml files from before and after).
2010-11-11 02:24:04 -07:00
Erik Fonnesbeck
a5ebdeff92
Fix handling of floating rules in the drag and drop reordering code. Fix for part of ticket #878
2010-11-11 00:51:24 -07:00
Erik Fonnesbeck
baaa8bb142
Move this function to allow removing it from easyrule.
2010-11-10 22:58:30 -07:00
Erik Fonnesbeck
88bc276013
Fix filter_rules_sort's compare function to know about floating rules so it won't change their order.
2010-11-10 22:43:08 -07:00
Erik Fonnesbeck
ea57ccb86b
Use this sort before saving, so the rule just added is sorted into the proper category like the rest.
2010-11-10 21:27:24 -07:00
Scott Ullrich
ce2078f7d0
Unbreak graphs
2010-11-10 23:14:31 -05:00