pfSense

Improved login page graphic

Revised CSS for login page

Fix handling of the 'type' parameter so it is validated and encoded on diag_table.php. Fixes #7652

Add input validation for interface names on firewall_nat_edit.php and fix encoding of the interface name in dst_change. Fixes #7651

Prevent the filename from being used to run XSS in the diag_edit.php file browser. Fixes #7650

Change login page footer positioning
Change paid support link to https://www.netgate.com/support

Remove experimental login page stuff

Improve "new design" notice

Experimental login page design
Set your favorite color in System->General->"Login CSS file"

Remove pftop peak and rate from the sort options as they won't produce anything useful when run the way the GUI does. Fixes #7580

Remove pftop size from this list, too. Fixes #7579

Change IPsec widget tunnel status to handle newer strongSwan childid format. Fixes #7499

Restore the captive portal feature to view the captive portal page directly from the portal web server. Add this as an additional button so both methods are possible. Fixes #7646

Redact BGP MD5 password/key in status output. Fixes #7642

Don't remove examples from packages as obsolete, some packages rely on the files being there.

Comment typo/whitespace fix

Add Spanish (Argentina) to the list of available languages

Update translation files

Regenerate pot

Fix DNS wildcard support for Loopia

Fix for the problem that wildcard CNAME records disappear from Loopia when doing a DNS update. As discussed here: https://forum.pfsense.org/index.php?topic=67793.0

Fix anchor tag location

Merge pull request #3750 from PiBa-NL/20170606-denyconfigwrite

permissions, log when user tries to save the configuration but has the 'deny config write' permission

Add more checks to eliminate empty config tags in package settings. Fixes #7624

Improve comment

Use the section ID as an anchor so that hyperlinks can jump directly to that sectiom
e.g.: $section = new Form_Section("My section", "a_here");
then: https://firewall/system_somepage.php#a_here

Fix preg_match call without delimiter and also use preg_quote() to variable used in pattern

Merge pull request #3740 from stilez/patch-59

Merge pull request #3731 from ylecuyer/ylecuyer-patch-1

Update translation files

Regenerate pot

Don't create system notices for errors in user-entered ad-hoc PHP (diag_command.php)

Various updates to PR

1) convert echo to print, and add infobox, as requested in PR comments
2) If no identifiable line number, say so
3) EVAL gives an error message format that wasn't picked up, it is now. Test case - enter as the code: eval("X");
4) Warn that EVAL gives a "spurious" "error at line 1" as well, the real error is in the (...). See above test case for this....

create global for user code dir, in diag_command.php

Going to try and stop user code generating notices, by putting it in a specific dir which doesn't give notices for syntax errors.

Merge pull request #3728 from PiBa-NL/20170511-fastauth

Merge pull request #3717 from phil-davis/patch-11

add comment

typo

Add missing break for cloudflare case

If user-entered PHP errors out, display the error line in context to help the user

If the user enters PHP in the command-line page, and it errors out, it's usually a typo or something minor. But the user is left with an error that references a /tmp file which doesn't exist at the point they read the message, a line number that's incorrect, and their input which doesn't display line numbers anyhow....

SG-23* serial number is igb0 mac address

Merge pull request #3739 from PiBa-NL/20170521-js-versioning

Merge pull request #3737 from phil-davis/diag-dns-hide-add-alias-button

Merge pull request #3729 from znerol/bug/master/tmp-script

Merge pull request #3715 from phil-davis/if-stats-widget-settings

Merge pull request #3730 from PiBa-NL/20170517-sort-virtualips

Merge pull request #3732 from phil-davis/rule-created-updated

Add download button/function directly on status.php to ease confusion.

Merge pull request #3733 from PiBa-NL/20170520-pkgedit-shiftemptyelement

Merge pull request #3734 from phil-davis/patch-1

Merge pull request #3735 from phil-davis/dns-lookup-add-alias

Merge pull request #3736 from phil-davis/diag-dns-change-host-add-alias

Add NGID to status.php

Add Bosnian to GUI since it's over 75% translated

Update translation files

Regenerate pot

Fix links to CP MAC management page so they include the zone name. Fixes #7591

Select "No Authentication" for a portal zone by default, since it is the default behavior, but the GUI requires a value to be set. Fixes #7591

Fix options text/display for IPv4 DNS and Verify SSL on DynDNS clients. Fixes #7588

Standardize privilege page and sorting between users and groups. Fixes #7587

Add username to display when adding user privileges. Fixes #7586

Provide a useful error message to the user when there is no private CA with which to create a new user certificate. Fixes #7585

Fix path to old pftop file in obsolete list. Fixes #7581

Do not offer the 'peak' and 'rate' views for pftop since they only work in interactive mode with cached data, not batch mode like the GUI uses. Fixes #7580

Remove "size" option from pftop as it does nothing. The "bytes" option is the correct one to use. Fixes #7579

In the OpenVPN wizard, if the user chooses a different auth server type, clear out stored settings so the wizard does not pre-fill bad info. Fixes #7569

The logic for resolv-retry infinite was always setting it in client mode no matter what the GUI option wanted. Remove the GUI option and clean up the logic so it isn't duplicated. Fixes #7572

Clarify address assignment behavior in the Tunnel Network fields for openvpn clients and servers. Fixes #7573

Fix help text for route_no_exec. Issue #7575

Fix OpenVPN server port validation to disallow "0". 0 is still OK for client port, which is the same meaning as blank/empty. Fixes #7565

Remove references to unused "Address Pool" setting. The address behavior is now determined by the mode, and has been for years. Fixes #7567

Remove refs to defunct OpenVPN client manager port. Fixes #7568

Fix L2TP section log shortcut. Fixes #7564

Disable internal L2TP users when activating RADIUS, to follow the behavior stated in the GUI. Fixes #7561

Improve L2TP Server DNS input validation. Fixes #7560

Remove unused WINS code for L2TP. Fixes #7559

auth_check, faster authentication check while automatically refreshing diag_routes

webgui, load .js files with ?v=mtime version to prevent using old scripts after updating

Diag DNS disable Add Alias button when host field is changed

Diag DNS do not create an empty alias if name does not resolve

Diag DNS do not show Add Alias if no priv to add alais

Diag DNS fix update alias button text after add alias

1) Lookup a name with Diag DNS
2) Press "Add Alias"
The alias is added, but the button still says "Add Alias".

Actually the alias exists by now. The button should say "Update Alias".

Fix: once we have emitted the alias create/update success message, we can set $alias_exists true so that the rest of the code is based on the (possibly new) state.

pkg_edit, fix empty config tag check

Use recently added hwaddr field to restore original MAC address

Make consistent rule information section

Removed htmlspecialchars when loading leases from config

Improve indenting/readability

virtualips, ability to sort the table

Revert "Updated d3.js and d3pie.js to latest versions"

This reverts commit 47d4784602466d723a84bb1af6d313c4ba5a0115.

t revert 47d4784602466d723a84bb1af6d313c4ba5a0115qMerge branch 'master' of gitlab.netgate.com:pfsense/pfsense

Update translation files

Regenerate pot

Refine some syslogd restarts, add a way to send it a HUP to reload w/o a full restart. Part of ticket #7256

auth_check, move the cmp_page_matches() to its own file so it can be shared by both auth_check.inc and priv.inc

Small adjustment to dmesg parsing for CPU package/core count.

Remove stray debug-code (/tmp/script)

Merge pull request #3725 from sestary/master

Use is_numeric() to make sure $prefix is not 0

Merge pull request #3604 from enukane/fix/openvpn-ipv6-remote-netmask-0-treated-as-128

Merge pull request #3556 from doktornotor/patch-3