pfSense

Make a function to get the current theme and use it everywhere rather than duplicating code or missing functions. (Fixes forced themes using the wrong theme for login screen)

Conflicts:

etc/inc/util.inc
        usr/local/www/head.inc

Encode the interface parameter before using it in a redirect

Encode the if parameter before using it in redirects, too.

Encode the if parameter before using it in html

Escape parameters better when managing tables. Fix test to allow deleting subnet entries as well as IPs.

Remove debug output

Set the CSRF Magic timeout to the same as the session timeout, so that if a user sets a lower session time, the CSRF magic tokens do not outlive the user's session.

Update CSRF Magic

Eliminate system calls here, use PHP instead.

Sanitize some variables
Discovered-By: Yann CAM