rdwebdesign
75251c173c
Added new theme LCARS.
...
Signed-off-by: rdwebdesign <github@rdwebdesign.com.br >
2021-10-24 01:46:44 -03:00
Adam Warner
01191c7a1b
Merge pull request from GHSA-mhr8-7rvg-8r43
...
* Prevent possible XSS attack vector on add_client
Update JS code to prevent possible XSS vector
Co-authored-by: Harold Kim <root@stypr.com >
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
* Fix both addClient and deleteClient to prevent XSS
Signed-off-by: Harold Kim <root@stypr.com >
Co-authored-by: Harold Kim <root@stypr.com >
2021-10-23 19:26:07 +01:00
Adam Warner
bce2476d78
Display Docker Tag in footer if the PIHOLE_DOCKER_TAG environment variable is detected ( #1933 )
...
* If `PIHOLE_DOCKER_TAG` is set in the environment then display it as Docker Tag in the versions footer. Else, don't.
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
* Update scripts/pi-hole/php/footer.php
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
Co-authored-by: DL6ER <DL6ER@users.noreply.github.com >
Co-authored-by: DL6ER <DL6ER@users.noreply.github.com >
2021-10-23 17:55:07 +02:00
DL6ER
5d981c165b
Merge pull request #1924 from yubiuser/delete_network
...
Add delete button to the network table to allow deleting individual entries
2021-10-23 16:41:22 +02:00
DL6ER
9ab9850c9c
Merge pull request #1925 from pi-hole/tweak/local_dns_cname
...
Do not restart for every item during Teleporter import of Local DNS record or CNAME
2021-10-23 16:39:12 +02:00
yubiuser
f2322157c8
Remove obsolet list_verify function
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-10-19 00:12:26 +02:00
yubiuser
e00d706b49
Fix tabs->spaces
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-10-15 07:42:00 +02:00
yubiuser
ab9454a582
Also use variable to disable reload in delteALL functions
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-10-13 20:47:02 +02:00
yubiuser
b80c97f6d3
Do only reload pihole once after Local DNS Records or CNAME have been modified
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-10-12 21:37:06 +02:00
yubiuser
9f0e5fa67e
Use getCustomDNSEntries in deleteAllCustomDNSEntries
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-10-12 20:50:37 +02:00
yubiuser
98ee67efed
Add delete function
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-10-11 14:46:10 +02:00
yubiuser
49c84e58dd
Suppress empty lines output during teleporter import ( #1921 )
...
Signed-off-by: Yubiuser <ckoenig@posteo.de >
2021-10-11 09:05:08 +01:00
yubiuser
85121b69b1
Count right during teleporter import ( #1922 )
...
Signed-off-by: Yubiuser <ckoenig@posteo.de >
2021-10-10 22:31:59 +01:00
Th3M3
0d24f25f3c
Modal Dialog for Teleporter-import
...
fixes page reload every time the DHCP tab gets active
Signed-off-by: Th3M3 <the_me@outlook.de >
2021-10-07 00:12:33 +01:00
Chris Miceli
1ed98f6f38
1777 Remember me for 7 days doesn't work if you log in from Recent Queries ( #1870 )
...
set cookie if requested
Signed-off-by: Chris Miceli <chrismiceli@outlook.com >
2021-10-06 23:39:21 +01:00
David Beitey
effcd907cd
Make entire Forgot Password box header clickable ( #1917 )
...
This adjusts the markup for the Forgot Password box such that the entire
box header (the text, whitespace and plus/minus icon) is interactive.
Previous behaviour of clicking the icon remains the same.
This also improves the markup/spacing inside the box's content.
Signed-off-by: David Beitey <david@davidjb.com >
2021-10-06 22:43:56 +01:00
Adam Warner
d64818c7a5
Merge pull request #1892 from a1346054/fixes
...
Simple maintenance improvements
2021-09-29 21:17:25 +01:00
Adam Warner
5f52259c7e
Merge pull request #1897 from yubiuser/lift_subnet_limitation
...
Lift prefix limitaion for --rev-server
2021-09-29 21:11:44 +01:00
yubiuser
7f13dda4a8
Fix regex
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-09-21 19:59:24 +02:00
yubiuser
2d41191ac3
Lift prefix limitaion for --rev-server
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-09-21 09:25:31 +02:00
a1346054
26f0203137
Trim excess whitespace
...
Signed-off-by: a1346054 <36859588+a1346054@users.noreply.github.com >
2021-09-15 21:23:01 +00:00
a1346054
48c63c0a0b
Fix spelling
...
Signed-off-by: a1346054 <36859588+a1346054@users.noreply.github.com >
2021-09-15 21:22:59 +00:00
a1346054
7517028c64
Add final newline
...
Signed-off-by: a1346054 <36859588+a1346054@users.noreply.github.com >
2021-09-15 21:22:56 +00:00
yubiuser
e0ba6ded2a
Address review comments
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-09-12 19:42:34 +02:00
yubiuser
9aaa45a034
Add delete button to message table
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-09-12 19:41:15 +02:00
yubiuser
3889c0733f
Add forgotton target _blank
...
Signed-off-by: yubiuser <ckoenig@posteo.de >
2021-09-12 12:30:45 +02:00
Adam Warner
2e9bb78472
Merge pull request #1882 from pi-hole/master
...
Sync Master back to Dev
2021-09-11 22:39:57 +01:00
DL6ER
438c5be2f3
Merge pull request #1854 from pi-hole/XhmikosR-patch-1
...
footer.php: move FTL before Web Interface
2021-09-11 22:01:02 +02:00
Adam Warner
25df783378
Apply htmlentities in a couple of places to prevent xss
...
Co-authored-by: wtwver <wtwver@users.noreply.github.com >
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
2021-09-11 20:03:05 +01:00
Adam Warner
cf8602eedd
set httponly to true when calling setcookie. the ini_set option above doesn't actually seem to do anything... (but not removing it just in case
...
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
2021-09-11 19:36:18 +01:00
Adam Warner
a7ec9510b5
re-implement fix introduced in 1664090a01
...
Release v5.5.1 (based on `master`) has fixed this in `savesettings.php`, but the functionality has since been moved to `func.php` in `devel`, and so the fix needs applying here, too.
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
2021-08-04 20:44:20 +01:00
Adam Warner
647eba40d3
Merge branch 'release/v5.6' into devel
2021-08-04 20:32:59 +01:00
Adam Warner
dacdb3d72c
Merge pull request #1857 from pi-hole/master
...
Sync Master -> Dev
2021-08-04 20:21:44 +01:00
Adam Warner
7aa8057df7
Merge pull request from GHSA-5cm9-6p3m-v259
...
Fix (Authenticated) Remote Code Execution Possible in Web Interface 5.5
2021-08-04 18:13:35 +01:00
Adam Warner
8066069a1f
Prevent arbritary js code from beign returned from the database
...
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
2021-08-04 17:29:57 +01:00
XhmikosR
26ec74a75a
footer.php: move FTL before Web Interface
...
Signed-off-by: XhmikosR <xhmikosr@gmail.com >
2021-07-31 21:13:01 +03:00
DL6ER
559150bb1f
Fix inverse logic when adding domains on the group management pages.
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2021-07-25 19:03:34 +02:00
DL6ER
03920e3595
Move validation functions into func.php and use the same validation in all cases.
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2021-07-25 16:59:16 +02:00
Adam Warner
68034029b7
Merge pull request #1822 from adyanth/devel
...
Adding CORS support via environment variable
2021-07-04 11:49:01 +01:00
Adam Warner
f229e4fcc9
Merge pull request #1832 from kthchew/safari-15
...
Improve `theme-color` and `background-color` for different themes
2021-07-04 01:51:32 +01:00
Adam Warner
1664090a01
Escape . in regex for validDomainWildcard to ensure malicious commands cannot be passed to the function
...
bonus, removed some trailing whitespace on line 30
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
2021-06-23 17:34:43 +01:00
DL6ER
a2c64d6d19
Merge pull request #1836 from AlexLamond/auto-darkmode
...
Added the option for an automatic dark mode based on the device status
2021-06-22 16:15:51 +02:00
Alex L
57a5518c23
Update scripts/pi-hole/php/theme.php
...
Corrected naming conventions for files and theme name
Co-authored-by: DL6ER <DL6ER@users.noreply.github.com >
Signed-off-by: Alex Lamond <9060360+AlexLamond@users.noreply.github.com >
2021-06-22 12:52:24 +02:00
AlexLamond
5538af20b8
Added the option for an automatic dark mode based on the device status
...
Signed-off-by: = <9060360+AlexLamond@users.noreply.github.com >
Signed-off-by: Alex Lamond <9060360+AlexLamond@users.noreply.github.com >
2021-06-22 12:52:24 +02:00
Kenneth Chew
2f3f4e6056
Adapt theme-color and background-color for different themes
...
Signed-off-by: Kenneth Chew <kenneth.c0@protonmail.com >
2021-06-19 01:02:53 -04:00
Adyanth H
5331620b71
Change tabs to spaces
...
Signed-off-by: Adyanth H <33192449+adyanth@users.noreply.github.com >
2021-06-16 10:42:13 +05:30
Adyanth H
23364cfc55
Adding CORS support via environment variable
...
Signed-off-by: Adyanth H <33192449+adyanth@users.noreply.github.com >
2021-06-07 16:19:04 +05:30
Sean F Quinn
774f95f3fa
Fixes pi-hole/AdminLTE#1796
...
Signed-off-by: Sean F Quinn <sean@esqew.com >
2021-05-06 14:02:09 -04:00
DL6ER
ca71bc8df8
Check if we can get a host name from the database when looking up the MAC address of this client instead
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2021-04-29 09:28:12 +02:00
Dylan Sealy
4fc8f283f6
Password autocompletion
...
Signed-off-by: Dylan Sealy <66305635+DylanSealy@users.noreply.github.com >
2021-04-21 22:38:51 +02:00