Move this function to allow removing it from easyrule.
Fix filter_rules_sort's compare function to know about floating rules so it won't change their order.
Use this sort before saving, so the rule just added is sorted into the proper category like the rest.
Unbreak graphs
Copy logic for when to show the cellular tab from status_rrd_graph.php. Fixes #714
Return this field to its old name to prevent a conflict of names and since the code that uses it still refers to it by that name. Issue reported at http://forum.pfsense.org/index.php/topic,29985.0.html
This caused the full name field to be ignored when creating a user and prevented making a certificate at the creation of the user (either could still be changed afterward).
Only use escapeshellarg when passing the arguments to the shell. Fixes #1005
Note that this textbox controls HTTP_REFERER hostname checks as well
This will prevent HTML pages from crafting HTML GETs against the web interface and will prevent firewall admins from being "tricked" into clicking on links that may be harmful to their firewall.
Fix misc XSS issues from davey b
Add option to System: Firmware: Settings for running gitsync after installing an update, hidden/disabled if git has not been installed yet.
Ensure csrf magic is loaded
Fix Misc XSS issues
Testing csrf-magic
Add a setting for the data type of values used with DHCP option numbers and input validation for each type. Fixes #962
Add a function type to the field types allowed, to allow more field types without directly adding all of them to row helper.
fix input validation for GRE
Add a button to connect a non-mobile IPsec VPN from Status > IPsec. Sends a ping from a local IP in the p2 subnet (if one exists on the router) to the remote p2 subnet.
Return disabled interfaces as well
Do not use sub array
Make sure ipsec is incuded in valid interfaces
Move Note to bottom of page
Show interface description
Interface names should appear as uppercase
Do not escape strings twice
Misc fixes. Use htmlspecialchars() in more places. Use escaped shell argument.
Various CRL fixes.
Define variable a bit earlier in case its shared
Use get_configured_interface_list() so Ermal does not yell at me :)
Fix misc input validation errors. Move routed/* to same dir as pkg items
Ensure passed interface is valid
Use htmlspecialchars() for santitized output
Ensure that we are working with a proper passed interface..
If the anti-lockout rule is active, show it in the rules list for the LAN interface (or WAN if the interface count is 1, same rules as in filter.inc for putting the rule in the ruleset)
Warn a user when entering the OpenVPN client/server screens that they need a CA/Cert if none exist.
Use addslashes() here to prevent unescaped quotes from causing PHP errors. Fixes advanced/custom options in OpenVPN wizard.
Use a different variable name here to avoid colliding with another of the same name.
Use != here to avoid a potential issue with empty() testing intermediate arrays.
Add a button to the filter reload screen to force a config sync (only shows up if a config sync peer is defined).
Fix saving of off/disabled PPPoE server instances. Fixes #987
Don't show empty user IPsec keys.
Ticket #980. Bring CP widget up to date. Also bind lighty for CP to 127.0.0.1 it should not be accessible otherwise.
Don't use pconfig in a widget, it can cause issues with other widget settings.
CSS changes, fixes misaligned cursor in some password fields. Fixes item 1 in ticket #830
More VPN log fixes, for consistency. Ticket #912
Switch from buttons to tabs, add a mode to view raw mpd logs for each vpn type, and some general cleanup. Fixes #912
Fix VPN log page to use the updated log format (again). Ticket #912.
Show login/logout events for pptp, pppoe server, and l2tp. Could use some work to simplify. Ticket #912.
Sync service status widget code with service status page. Fixes #984
Test for arrays first, should fix #968
Make the change here, too.
Replace \r from custom options otherwise it breaks config.
Fix formatting
Fix this logic.
Ticket #975. Rearrange code a little.
Do not require LDAP search base DN. Requiring this can prevent some valid LDAP configurations from properly authenticating. (See GDD-550841).
Ticket #959: keep local ipalias and proxyarp vip's during a XMLRPC restore
Make the $pgtitle output a link back to the current page for a convenient way of reloading.
Remove unnecessary (and unclosed) form tag.
Do not allow spaces in load balancer name fields, they are invalid in relayd.
Resolves #971. Fix wizard.php to show interface descriptive names. Pointy-hat: gnhb
Balance <p> with </p>
Put </ul> tags inside the same <td> since they cannot span multiple of them.
Clear some forgotten </img> </font> tags.
Display the ICMP type (abbreviated) in the firewall rule list and show the full text when the cursor is over it for ticket #762
Break after the first error.
Prevent the DHCP range from being changed to include static mapping entries. Fixes #964.
Reject DHCP static mappings that are inside of the DHCP range. Fixes #966
Remove WIP note. This should resolve #555.
Indicate in various places if a certificate is revoked.
Indicate if a certificate has been revoked, both in the cert list and the user manager list.
Add ability to select reason codes for revocation. Reformat CRL edit screen a bit. Ticket #555
Refresh OpenVPN CRL files when a CRL has a cert added/removed. Ticket #555
Add support for deleting a cert from a CRL (unrevoke). As of this point basic CRL functionality does work: Revoke a cert and it cannot connect. Remove it from the CRL and it can. (Have to edit/save OpenVPN server instance to update/refresh CRL though). Ticket #555
Change OpenVPN wizard to set input_errors when there is a fatal condition that will require preventing a config save.
Add these error/info box classes to the wizard.css file.
Add a patch to wizard.php to support input_errors from sullrich (with some modifications).
Reject special characters in CA/Cert field names during OpenVPN wizard. Fixes #900
Add more CRL functionality. Needs to wait on a new build for further testing.
Fix some forgotten name->descr changes.
Traffic shaper wizards remove redirection before final step. This seems a forgotten item.
Generalize the "low res" user agent detection so it isn't Apple-specific. Include Android in the detection, and also provide a mechanism so that the "low res" theme can be set in globals.inc.
Rename 'name' to 'descr' for CA, Certificates, and CRLs, to gain CDATA protection and standardize field names. Ticket #320.
Convert fullname field on users to descr, so it gains CDATA protection.
desc to descr in Load Balancer config, so they gain CDATA protection and standardize field names. Ticket #320.
Change the description field on sysctl tunables to be 'descr' and not 'desc' so they will gain CDATA protection. Ticket #320
Fix the dedicated and multi_all wizards. They had typos in variable names and some remaining unused code which caused problems!
Disable the bandwidth speed selection field also to avoid errors/problems when the catch all is not activated.
Character '#' is invalid in string fields of SNMP service screen. Ticket #956
Do not include 'remoteid' javascript functions for mobile ipsec. Ticket #797
Ticket #934. Perform test only for ldap backend. Also tell the user through a message when they click it for other backends.
Resolves #879. Commit patch referenced in ticket to properly parse rate output.
Ticket #950. Correctly handle failures while installing packages which might leave stale information behind. Also do not try to startup services twice. Rename uninstall_package_from_name to uninstall_package because the operation on packages is only done through package names.
Hide ports when protocol does not use ports. Ticket #953