pfSense

Show user when pkg metadata was updated

Remove dead code using in the past to migrate from pfSense-repo-devel to a single pkg called pfSense-repo

System info widget prepared for background version checks

COmpleted conversion of dashboard widget to ventralized refresh system

Re-wrote ipsec widgt to return JSON formatted AJAX data

First part of dashboard update system

Adding widget and login css files

New login design back-ported from 2.4

Change IPsec widget tunnel status to handle newer strongSwan childid format. Fixes #7499

(cherry picked from commit 4de753e52d8bbc732f23f90dd77df1707fbc3912)

pfSense 2.4 setHelp syntax was applied to v 2.3 - arguments should be provided in an array

Fix #7625: Auto select '128' as mask for IPv6

Use correct wording for menu entry "Reset All States" in "System/Advanced Network"

(cherry picked from commit ee7bdbe69b873544b960c159386971af42cba52d)

Add GUI entry for ip_change_kill_states in Network/Advanced (See #1629)

(cherry picked from commit 66a405929e61938c036005cca8fde0ba17554a27)

Merge pull request #3774 from phil-davis/sort-if-names-RELENG_2_3

Trafficshaper, show interface names for disabled interfaces, dont just show a kinda 'empty' spot..

(cherry picked from commit 725aee3f19ea01d48f14e65ac60e4189218b3834)

Correct typo's as per Jim's request

(cherry picked from commit 3e86fa9913091ded202854a931fa02320f7fa1a0)

Add Option to use static IPV6 over v4 parent ( PPPoE

A new option when setting a v6 static on the WAN to allow the connection to use the V4 interfaces i.e. PPPoE

(cherry picked from commit b73313837b9efe6021fe7841adf6e837a89607a1)

typo

"Networked" not "network" - "Internet of Things" especially.

(cherry picked from commit d751dee379b37da868efa837df55434935efe9b8)

grammar fix

(cherry picked from commit 94ef78afa96f1870b453fab670754c01c6161665)

format %1$s etc in help

(cherry picked from commit ef77e40e0c7b861cc268cd1f0e30600f573b807e)

Improve the HELP note about what will/won't work if TLD is set to ".local"

For example, some people won't use mDNS and won't know other things might break; also it's not clear that while ".local" is a problem, ".local.lan" isn't.

(cherry picked from commit b45746a37c2a571553fec2cae0f07d5e68eacc47)

Add support for IPv6 AUTO_LINKLOCAL flag on bridge interfaces

(cherry picked from commit b060e08c9dd701b56b5163321b5e9a79f90b1f23)

Use attribute rekey_enable as usual but optionally allow to set margintime if rekeying is not disabled

(cherry picked from commit 376e6f6719e6463913045b233ca90d69254057ff)

Fix indent of if-block

(cherry picked from commit 9d472f01c31f2b56a95631dcd4f49e4685f55ea6)

Check if margintime is numeric and smaller than P1 lifetime

(cherry picked from commit af729f53f3c838f91dffb6368b656ddece527e05)

Hide margintime if rekeying is disabled

(cherry picked from commit e18ddb38449b6463fabf5782284b206a355dbad7)

Add strongswan rekeymargin attribute to vpn ipsec phase1 view

(cherry picked from commit 9542011684a26e0b1b959d9b56d5fcfc12023893)

dhcp6c Advanced Config prefix interface

Currently, when using dhcp6c advanced configuration the prefix interface is WAN, this is not very useful!

The changes here allow the user to select the interface that the PD will be applied on..

(cherry picked from commit 58a185aede55efe71cabc337938ed05f456eecea)

dns, allow deleting last row for "Additional Names for this Host"

(cherry picked from commit f6cf3687d21c6ca6ba7a25605fafe249f866b439)

Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690
Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, for users to get the previous behavior of defining short names for hosts.

Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682

Remove extra spaces from User Agent

Send uniqueid instead of UUID on user-agent

Move uniqueid read to a function system_get_uniqueid()

Add user option to sort interface names RELENG_2_3

Signed-off-by: Phil Davis <phil@jankaritech.com>

Update diag_gmirror.php

Fix typo

(cherry picked from commit 55588e0ce32865568522e0afd0b577fdfabd3b74)

Issue #7659 foreach warning on adding gateway RELENG_2_3

Signed-off-by: Phil Davis <phil@jankaritech.com>
(cherry picked from commit 5c88dacbc259c668899d8127e9ad1ec74d12e565)

Fix interface groups link

Add more checks to eliminate empty config tags in package settings. Fixes #7624

Add input validation for interface names on firewall_nat_edit.php and fix encoding of the interface name in dst_change. Fixes #7651

Fix handling of the 'type' parameter so it is validated and encoded on diag_table.php. Fixes #7652

Prevent the filename from being used to run XSS in the diag_edit.php file browser. Fixes #7650

Change paid support help link to new support URL

Restore the captive portal feature to view the captive portal page directly from the portal web server. Add this as an additional button so both methods are possible. Fixes #7646

Redact BGP MD5 password/key in status output. Fixes #7642

(cherry picked from commit aa18c5b9b62e110ebf88fbb24c39c2a13813bd89)

Various updates to PR

1) convert echo to print, and add infobox, as requested in PR comments
2) If no identifiable line number, say so
3) EVAL gives an error message format that wasn't picked up, it is now. Test case - enter as the code: eval("X");
4) Warn that EVAL gives a "spurious" "error at line 1" as well, the real error is in the (...). See above test case for this....

add comment
(cherry picked from commit d2d58d6ad1b32e0ccce094bfd247547f353e38ba)

typo
(cherry picked from commit 4711322b4a6ecedba6a4a11c1f7f04ef8427b46e)

If user-entered PHP errors out, display the error line in context to help the user

If the user enters PHP in the command-line page, and it errors out, it's usually a typo or something minor. But the user is left with an error that references a /tmp file which doesn't exist at the point they read the message, a line number that's incorrect, and their input which doesn't display line numbers anyhow....

Removed htmlspecialchars when loading leases from config
(cherry picked from commit 2322e9f3cb6dea9203d63a17c6a27de3a2c6b8bc)

auth_check, faster authentication check while automatically refreshing diag_routes

(cherry picked from commit 60ba7c7642036deb1001f1862e5c19d465fbdf74)

auth_check lowers cpu usage for checking if the user has permission for the page requested when used in place of guiconfig, especially useful for frequent requests like those made by stats and traffic widgets

(cherry picked from commit c07071cbcadd1c9de9951d9ba497b73752ee52cc)

Add missing break for cloudflare case
(cherry picked from commit d900381c9384676462c91c0b2e7e59ec42723237)

Integrate various cloudflare changes
(cherry picked from commit 5ce6ce4b1ad850e70d5a2fe218317b1a1b545907)

Diag DNS disable Add Alias button when host field is changed

(cherry picked from commit 45eafdbd7b958bd4f9459d90a6a63ff8202eec3b)

Remove stray debug-code (/tmp/script)

(cherry picked from commit a29361a2d94eed754255e75d63d511e7889d6c9f)

virtualips, ability to sort the table

(cherry picked from commit 77c53e65fb7d4f40baec5c01a796a637c9cc5034)

Make consistent rule information section

(cherry picked from commit f0dc8b688c2b7d973bc18769579ee8cc6d3d2dad)

Add download button/function directly on status.php to ease confusion.

(cherry picked from commit f7a72733f8c482e230e0042a6c65f4935a2b723a)

pkg_edit, fix empty config tag check

(cherry picked from commit 6bf2a65086f7664c870a9565b70c39655c2a3dcf)

Diag DNS fix update alias button text after add alias

1) Lookup a name with Diag DNS
2) Press "Add Alias"
The alias is added, but the button still says "Add Alias".

Actually the alias exists by now. The button should say "Update Alias".

Fix: once we have emitted the alias create/update success message, we can set $alias_exists true so that the rest of the code is based on the (possibly new) state.(cherry picked from commit 474b275684950ab8215b449987d4cbece005f9ed)

Diag DNS do not show Add Alias if no priv to add alais

(cherry picked from commit 7fcccc8f09afd7f4a524ff598b43e15d678905eb)

Diag DNS do not create an empty alias if name does not resolve

(cherry picked from commit f445385114c43cb46b8188a7cea425648f7647f2)

Add NGID to status.php

(cherry picked from commit fcc24426ab16b02ffc77bc7c9ee040d76dd987a2)

Backport syslogd service definition/control to RELENG_2_3. Ticket #4382

Revert "Updated d3.js and d3pie.js to latest versions"

This reverts commit 47d4784602466d723a84bb1af6d313c4ba5a0115.

Updated d3.js and d3pie.js to latest versions
Fixed #7546

(cherry picked from commit 47d4784602466d723a84bb1af6d313c4ba5a0115)

get_pkg_info improve installed_pkgs_only case

(cherry picked from commit dd6ecfa27246935ca03747162b802fcd4ba36100)

Add "netstat -nWx" to status.php output

(cherry picked from commit 6252b47062a3bf2be19a43be480fd0acd56b75d0)

Only cache CP RADIUS Auth credentials when reauthentication is enabled. Fixes #7528

(cherry picked from commit d4e42c54a2b7d9c955b11ad3034a186a73159f1a)

Typos in pkg management code comments

(cherry picked from commit 146dbf0139d1f3049131bdf7a7d96675e4ff00a4)

Let he user know if all selected interfaces are down

in the interface statistics widget.
At the moment, if all the selected interfaces are down, the widget will just display no columns. That will make users wonder what happened.
(cherry picked from commit b22fceb2d7973b8c80a55b4ec492819ddd5ae9f9)

Fix interface down in interface statistics widget

If an interface is down, the widget would write the interface description in a column heading but then omit the stats items. So later columns (to the right) would have the headings and stats items out of line....

Redmine #7318 None button for widget filters

(cherry picked from commit fba53b438540eb544c43adf4598e07320a910347)

Handle widgets having no items selected for display

(cherry picked from commit 405dfaad144de90a6e401354b80b82baf5ae3d59)

Remove bonus end td tag in interface statistics widget
(cherry picked from commit 9795332b0e101b4c500c3c75a8ea02325364fc17)

Make sure that array exists before using foreach() (Bug #7399)
(cherry picked from commit ce348731b63ea6980dc4f652e76d7c8c7432544c)

Spelling

space/tab

Add Netgate ID display to system info widget

Read default language from globals.inc instead of hardcoding (it was already defined there)

Set default anguage in General Setup to en_US

Since https://github.com/pfsense/pfsense/commit/fdcde31b4a910c4e058513c1e3f68a62e722da6b added German to the top of the get_locale_list() array, if you start with a default system and go to System->General Setup (make some changes to other fields if you like) and press Save, you end up in German because that is what gets selected in the dropdown when the config does not yet have a language in it....

Checks for DHCP Relay being enabled/disabled should be skipped when editting an additional pool

Encode hostname and other output for DHCP lease status. Fixes #7497

(cherry picked from commit a260eda55905607e9adfd5d7c3fd779b115459d5)

Always add the CN as the first SAN when creating a certificate in the GUI or an automatic GUI self-signed certificate. Per RFC 2818, relying on the CN to determine the hostname is deprecated, SANs are required. Chrome 58 started enforcing this requirement. Fixes #7496

Add expiration field to NDP listing

(cherry picked from commit fec2c3b73f05683b674d3b5351529268eadc8dd9)

Fix #7493 only check interface IP if static

(cherry picked from commit 8c6190e82f83a7907ec2757e72d9a8eac496dd61)

Avoid invalid arg error when saving WoL widget

when there are no WoL entries
(cherry picked from commit 66a5b767b1b533f6ce508a125404a2d8e3353c41)

Update services_dyndns_edit.php
(cherry picked from commit df4c21fc24cc6ff38988ca866928f2f73b97b744)

trafficgraphs, divide bandwidth by time when statistics where gathered to smooth out bumps in the graphs

(cherry picked from commit eddb01316c7ad06c1798e629b6158db505a86118)

ipsec overview, check label exists for interface including disabled ones, tell what was configured if not found.

(cherry picked from commit ac24ac6bbb5b94e1eb8420404a9b7bd9daf998b7)

ipsec webgui, move building the $iflabels array outside if the loop

(cherry picked from commit 11b9896609c2998106d5503fe2581bb3304b4a5f)

notify test buttons for smtp/growl should use new unsaved settings just made

(cherry picked from commit 64f8ec62ddd57241e4a8a755cade7ca8cd9196a6)

Do input validation on the actual array passed in

I was tearing my hair out for a while. If do_input_validation() is passed some array of keys/values that has been assembled elsewhere (not $_POST, $_GET or $_REQUEST superglobals) then it does not work. The code here, for at least the last 7 years, has actually been checking the array keys in the "hard-coded" superglobals. That is a bit surprising, since the array to be checked is passed in as $postdata parameter....

Escape IPv6 when passed to ndp delete command

(cherry picked from commit 1d92faa34f7c9aaa97b1983f273d2d73285befb5)

Add ability to delete NDP entry

(cherry picked from commit 13105d9c79fe3ac8be2b01c152fb9fb6a95147b4)

Remember original alias name on edit input errors

(cherry picked from commit 1271754326fe648093204296652398b1edd24912)

Refactor update_alias_names_upon_change

(cherry picked from commit 24807bfeaec218948937a1fdc2b4e863319e41a0)

Revise dev_mode change handler

(cherry picked from commit 8a0af41adc9c29ccf7b8dabb3b7658abf46054a6)

Fixed #7451
Revised onchage handlers to obviate need for second click in Chrome on MacOS

(cherry picked from commit dd3c646fa5744a550f91524035a92f509d6162cf)