Commit Graph

16249 Commits

Author SHA1 Message Date
Erik Fonnesbeck
f02f0675cc Ensure this is an array before entering the foreach loop. Fixes #1012 2010-11-16 18:38:44 -07:00
Ermal
aeaa735882 Make the pkg_fetch_recursive code stronger and try also to fetch from freebsd repo when fails to fetch from pfSense one. 2010-11-16 22:59:46 +00:00
Ermal
7b22832377 Avoid exec() and use php calls. 2010-11-16 22:38:49 +00:00
Ermal
1b28121fac Correctly form the url from where to fetch packages if a base is not specified. This unbreaks packages on amd64! Also do no remove a package which is required by other installations. 2010-11-16 22:11:33 +00:00
Ermal
fe81116d43 Correct variable name. 2010-11-16 19:56:03 +00:00
Ermal
fcf92daec2 * Use pkg_info -E pkgname* for testing if a package is installed.
* Do not call eval if we cannot include an .inc file since that will make the whole script fail.
* Keep the log from the start to the end without overwriting. This makes debugging and problem reporting easy and explains what is done during installation.
* Check retrun value of download_with_progress_bar to make it possible catching errors during download.
* Lots of improvements in between

Related to Ticket #950
2010-11-16 19:40:20 +00:00
Ermal
55910da798 Tighten check even more. Ticket #1006. 2010-11-16 16:29:02 +00:00
Ermal
b878ad364a Ticket #1006. Make sure to interpret the response as needed. First check if we got 0 and then check if we have a faultCode(). 2010-11-16 16:21:49 +00:00
Erik Fonnesbeck
e6b960ccff Make sure this isn't searching the referrer using a blank host or IP, which will always match the referrer. 2010-11-15 20:56:47 -07:00
Erik Fonnesbeck
55068970f2 Fix case for testing the referrer check setting. Ticket #1011 2010-11-15 20:35:30 -07:00
Ermal
efe259cfab Remove these anchors they just provide overhead and are not really used much in pfSense. 2010-11-15 20:01:30 +00:00
Ermal
d268d45751 Remove gre helping rules they are not anymore needed. 2010-11-15 19:55:28 +00:00
Scott Ullrich
99b1cc43b3 Disable CSRF checks on the backup page. 2010-11-15 14:16:54 -05:00
Scott Ullrich
0dcdbc8573 Send errors to 2> 2010-11-15 13:50:56 -05:00
Scott Ullrich
64ec1ddf35 Add nocsrf flag 2010-11-14 14:46:35 -05:00
jim-p
364ecdd1ba Fix misnamed form field on CRL import. 2010-11-14 14:29:26 -05:00
Erik Fonnesbeck
fbd96b06f5 Fix variable names. Ticket #954 2010-11-14 07:55:31 -07:00
Erik Fonnesbeck
bd32ac6cf1 Fix case of variable name for swap usage. Ticket #477 2010-11-14 06:59:41 -07:00
Erik Fonnesbeck
ba8e08709a Copy /boot/loader.conf.local to the newly imaged slice. Ticket #892 2010-11-14 05:36:28 -07:00
Erik Fonnesbeck
0aa72c108d Don't perform referer check if display_error_form is not defined (captive portal), just like as is done for the DNS rebind check. Ticket #1007 2010-11-14 04:05:40 -07:00
Erik Fonnesbeck
0532e54d93 Rework handling of ports for reflection on port forwards to work properly with port aliases. Ticket #672 2010-11-14 03:10:52 -07:00
Erik Fonnesbeck
856d2bf957 Unset this reference before reusing the variable name to prevent corruption of groups. 2010-11-13 23:06:34 -07:00
Scott Ullrich
ac50365306 Open link in new tab/window 2010-11-13 19:38:46 -05:00
Erik Fonnesbeck
bddc88183a Form image buttons are submit buttons and thus default buttons, causing unwanted behavior with the enter key. Use links instead, where possible. 2010-11-12 22:44:11 -07:00
Erik Fonnesbeck
6f7a997828 Add style to rowhelper normal text fields in packages for consistency. 2010-11-12 20:05:15 -07:00
Ermal
21699e7642 Fix test for altq on vlans and wlan. 2010-11-12 23:51:15 +00:00
Scott Ullrich
83fcd140dd CSRF startup code has been moved to guiconfig.inc 2010-11-12 18:34:51 -05:00
Scott Ullrich
fafd303ea9 Unbreak AJAX 2010-11-12 18:30:43 -05:00
Scott Ullrich
c895ab7b9d Misc XSS fixes 2010-11-12 16:05:47 -05:00
jim-p
2bf0ada5ed Protect against XSS by someone broadcasting an HTML SSID... (better to be safe...) 2010-11-12 12:29:53 -05:00
jim-p
f01d8c4951 One more potential XSS vector. Not sure how it would have text injected here, but better safe than sorry. 2010-11-12 12:15:14 -05:00
jim-p
060d4c5ec0 More notice XSS fixes. 2010-11-12 12:02:44 -05:00
Scott Ullrich
dd5bf424c1 Fix XSS issues 2010-11-12 11:36:20 -05:00
jim-p
4656943e59 Fix a theoretical/potential XSS in the http_referer check warning. 2010-11-12 11:35:02 -05:00
jim-p
190d5d5814 Fix XSS in notices. 2010-11-12 11:29:25 -05:00
Scott Ullrich
225a2f0b46 Bring in XSS id fixes from m0n0wall 2010-11-12 11:03:51 -05:00
Ermal
5812e717eb Add whitespace to avoid breaking the resulting rule. 2010-11-12 11:53:27 +00:00
Ermal
f27789bf9c Whitespace fixes. 2010-11-12 11:52:10 +00:00
Ermal
f829d53248 Make sure there is a direction specified otherwise errors might occur. 2010-11-12 11:51:09 +00:00
Ermal
9869cf3e25 Initialize rule keeping array to avoid possible caching effects on php. 2010-11-12 11:49:27 +00:00
Erik Fonnesbeck
19310a561a Clarify these descriptions a bit more on 1:1 edit. 2010-11-12 02:17:29 -07:00
Scott Ullrich
a2f38ac4d4 Handle AJAX 2010-11-11 09:17:56 -05:00
Warren Baker
6f567a593d NiftyCheck already included in bottom-loader.js otherwise div mainarea gets rounded twice. 2010-11-11 12:51:56 +02:00
Erik Fonnesbeck
cea355a54d Separate this into the original case with the floating rule cases above it to fix some scenarios where the order was still wrong. 2010-11-11 02:53:35 -07:00
Erik Fonnesbeck
cb53651f67 Small rework of code for applying drag and drop reordering of rules and some extra checks added to fix some potential bugs. Ticket #878
Also minimizes the extent of the changes performed (useful when comparing config.xml files from before and after).
2010-11-11 02:24:04 -07:00
Erik Fonnesbeck
a5ebdeff92 Fix handling of floating rules in the drag and drop reordering code. Fix for part of ticket #878 2010-11-11 00:51:24 -07:00
Erik Fonnesbeck
baaa8bb142 Move this function to allow removing it from easyrule. 2010-11-10 22:58:30 -07:00
Erik Fonnesbeck
88bc276013 Fix filter_rules_sort's compare function to know about floating rules so it won't change their order. 2010-11-10 22:43:08 -07:00
Erik Fonnesbeck
ea57ccb86b Use this sort before saving, so the rule just added is sorted into the proper category like the rest. 2010-11-10 21:27:24 -07:00
Scott Ullrich
ce2078f7d0 Unbreak graphs 2010-11-10 23:14:31 -05:00