UnivNautes

Fix select name

Fix input validation logic on diag_testport.php, escape more shell arguments for good measure

Fix #3790. Fix IPv6 Prefix ID check using interface user choose before save

Use a uniqid() to track phase2 entries to avoid confustion and various mistakes when modifying and editing them.

Add message about Gold to setup wizard and menu/link to Gold signup.

Fix #3575, do not allow user to set IPs for GRE interfaces on interface edit page.

Fix redirect after editing permissions

Disable bandwidth checks for PRIQ, it should fix #3537

Fix field name that cannot contain spaces, and use displayname

Fix scheduler field name

Fix field name that cannot contain spaces, and use displayname

Fix field name

Strict checks for number of WANs and LANs on wizard

Fix number of WAN / LAN interfaces detection for dedicated wizard

Try to guess number of WANs

Try to guess number of WANs and LANs

Fix number of WAN and LAN connections check

Just show right type of interfaces (LAN/WAN) on traffic shapper wizards, it fixes #3535

Remove 'multi lan/single wan' and 'multi wan/single lan' traffic shaper wizards, multi lan/wan can be used to replace any of them

Replace exec() and system() calls by internal functions

Fix indent and whitespaces

Fix indent and whitespaces

Fix indent and whitespaces

Use SERVER_NAME instead of HTTP_HOST env var, it doesn't have port, then it avoids wizard end point to wrong IPv6 address. It should fix #3550

System: Firmware: Settings

Updater Settings Tab
system_firmware_settings.php

Line 488, Column 43: value of attribute "type" cannot be "input"; must be one of "text", "password", "checkbox", "radio", "submit", "reset", "file", "hidden", "image", "button"...

Merge pull request #1232 from N0YB/Widget_Gateways

Merge pull request #1235 from N0YB/Mixed_Case_Hostname

Merge pull request #1236 from N0YB/Widget_Services_Status

Merge pull request #1237 from N0YB/XHTML_Compliance_System_Menu

Review all parameters on unbound main GUI, fix boolean params and add missing ones. Also make it work properly with 'apply'

Use the apply trigger for unbound acls to avoid restart unbound every time

Fix indent and whitespaces

Some GUI tweaks on unbound main screen

Improve unbound ACL edit page to use correct classes and jquery.ipv4v6ify.js

Fix acl item removal

Few GUI tweaks on unbound ACL page

Fix multiple issues on unbound advanced options GUI:

- Drop many wrong key assignments to pconfig
- Add missing keys to pconfig
- Deal fine with boolean parameters
- Mark subsystem dirty to require apply button
- Drop calls to enable_change()
- Remove unecessary js function enable_change()...

Allow hostnames in bulk import since they are valid entries in a network type alias.

Merge pull request #1242 from ExolonDX/branch_master_01

Fix PHP script closing tag placement.

Convert almost all /sbin/sysctl calls to php functions

Fix indent

Add missing $g to global, as noted on pull request 1249

Change Cancel button to call history.back() as done in Firewall Rules, the current method has issues with IE 11, it should fix #3728

Also check and verify the package server's SSL certificate if using HTTPS. Issue 484
Our current XMLRPC client version doesn't have support on its own to validate this in a way we can use to test in a usable for printing an error message. For now, a cURL query to the XMLRPC URL is used in its place.

More refinements to the unofficial package repository warning ( Issue #484 ) -- Now also shows on Dashboard and installed package list. Cleaned up some code and shuffled things around to avoid unnecessary repetition.

Detect if an unofficial package repository is in use and warn the user. Part of issue #484 (more to go)

Stop calling auto_login() here since it's already called inside setup_serial_port()

Fix #3725:

- Fix match_filter_field() and also simplify logic
- Fix $filterfieldsarray initialization
- Avoid to have double spaces on filterfieldsarray['act']
- Fix filter on Firewall Logs

Add a BETA key for PBI signature check, this will be replaced by the final one before RELEASE. Ticket #3365

Set default serial speed to 115200 for 2.2, fixes #3715

Merge pull request #1238 from DasTestament/master

Update vpn_openvpn_server.php

Update vpn_openvpn_client.php

Merge pull request #1241 from Gertjanpfsense/master

Fix dscp values and provide a config upgrade to fix values stored in config.xml. This is a proper fix for #3688

Tidy up misc. XHTML

"diag_dns.php"
Tidy up "equals sign"

"services_captiveportal.php"
Add space to OPTION tag
Update HTML Boolean operator
Close INPUT and BR tags

"services_captiveportal_hostname.php"
Update ALIGN to MIDDLE

"services_captiveportal_vouchers.php"...

Update status_captiveportal.php

Don't ask to select a zone if there is only ONE.

oops, that wasn't supposed to be removed.

Use count($array) where applicable, instead of a $rowIndex increment.

Update vpn_openvpn_server.php

removed comments

Update vpn_openvpn_client.php

removed comments

Merge pull request #1218 from razzfazz/nat_add_missing_protocols_master

Remove also . and / from graph

Remove more backticks

Fix status_rrd_graph_img.php and also improve it:

- Remove escapeshellarg that broke command line
- Only remove dangerous chars to avoid command injection
- Replace all `hostname` calls by php_uname('n')
- Replace all `date` calls by strftime()
- Add $_gb to collect possibly garbage from exec return

Make sure single quotes are encoded and avoid javascript injection

Fix indent and whitespaces

Simplify logic, add some protection to user input parameters

Fix whitespaces and indent

We need to allow subdirectories under /usr/local/pkg, here is the proper fix

Change the option for webconfig login autocomplete from opt-in to opt-out, also bump config version and write a function to keep the current status on upgrades

Fix syntax error

Protect servicestatusfilter parameter with htmlspecialchars()

Protect rssfeed parameters with htmlspecialchars()

Avoid directory traversal on restorefullbackup

Fix core dump on viewing invalid package log

Remove . and / from pkg name to avoid directory traversal

Remove id=0 from miniupnpd menu and shortcut

Avoid directory traversal when reading package xml files, also check if file exists before try to read it

Make sure variables are escaped, also replace exec calls to run rm by unlink_if_exists()

Remove useless code, variable is set again on next line

Escape parameters passed to shell_exec()

Be more careful with host parameter and make sure it's escaped when call shell functions

Validate starttime and stoptime format

Default values for verb if it is not set when edit

a bit of refactoring

forgot to sync _server.php with _client.php naming style

patchpack1

-Fix #3401 (Added tun option "Disable IPv6"
-Added new options: route-nopull, route-noexec, verb;

XHTML Compliance - System Menu

Enforce select option

Make the byte counts on OpenVPN status human readable rather than huge unformatted numbers.

XHTML Compliance - System Menu

Advanced - Admin Access Tab
Advanced - Firewall / NAT Tab
Cert Manager - Certificate Revocation Tab
User Manager - Users Tab
User Manager - Groups Tab

Remove Status Verbiage. Consumes too much realestate in widget. Status icon without the verbiage is sufficient in widget view.

Hostnames are not case restrictive.

Better string check

Replace Header() calls by lowercase

Merge pull request #1229 from ExolonDX/branch-master_06

Merge pull request #1228 from ExolonDX/branch_master_05

Remove htmlspecialchars() call for a fixed string.

Bring the code of captiveportal up to speed with its module counterpart requirments

Fix #3665, show IPSec tunnel description on status page