Commit Graph
1055 Commits
Author SHA1 Message Date
DL6ER d7eada8156 Remove "Remember me for 7 days" checkbox. Each user gets their own independent session. By default, the session will expire after 5 minutes of no web interface being open (otherwise, it is continuously prolonged because of all the background API activity while refreshing the statistics). This timeout, however, can be set freely in pihole.toml and soon also in the web interface so this checkbox has stoped being useful.
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-02-03 18:07:11 +01:00
DL6ER cb90e604e8 Add system information on first tab of the settings page
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-02-01 22:59:12 +01:00
DL6ER 9464cf5d9b Remove db_queries.php. The Query Log has now builtin support for arbitrary time intervals
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-02-01 22:43:52 +01:00
DL6ER afd08593dd Use FTL-provided fileversion() function
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-02-01 22:39:43 +01:00
DL6ER 4eb9a4cf29 Port dashboard landing page to v6.0 API
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-01-31 20:41:12 +01:00
DL6ER 4cf7a82713 First steps into the v6.0 world. Login and logout is now possible and all pages load without PHP errors (even when they are mostly empty until we added all the new API methods)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-01-31 20:10:53 +01:00
Adam Warner 8025a38aca Fix PHP-CS-Fixer complaints 2023-01-25 19:00:20 +00:00
Adam WarnerandGitHub a998f51f2b Merge pull request from GHSA-33w4-xf7m-f82m
Fix Improper Session Handling vulnerability of "Remember me for 7 days" functionality
2023-01-25 18:53:00 +00:00
4n4nk3and4n4nk3 d31cf9d156 Fix insecure persistent login token
Signed-off-by: 4n4nk3 <47717886+4n4nk3@users.noreply.github.com>
2023-01-22 23:55:54 +01:00
Adam WarnerandGitHub 124d12ea37 Do not return 'false' if IDNA<->UNICODE conversion fails (#2479) 2023-01-22 14:10:50 +00:00
Glenn StraussandAdam Warner d94d86bad8 remove hard-coded /admin/ path; relocatable
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-01-22 12:46:34 +00:00
Christian König 68ac05fb7e Do not fail if IDNA<->UNICODE conversion fails
Signed-off-by: Christian König <ckoenig@posteo.de>
2023-01-20 17:04:30 +01:00
Christian KönigandElectronicsTinkerer a5eb854129 Add default value for $ver in func.php
Signed-off-by: Christian König <ckoenig@posteo.de>

Co-authored-by: ElectronicsTinkerer <ElectronicsTinkerer@users.noreply.github.com>
2023-01-16 23:02:24 +01:00
RD WebDesign 302a402277 Avoid caching issues using last modified time
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2023-01-13 23:10:15 -03:00
RD WebDesign 839836d848 Highlight the searched text
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2023-01-13 15:15:17 -03:00
RD WebDesign 9c62cc5225 Remove unused/dead old code
- "quiet" option and related functions (used by blocking page);
- "adlist" option (used by blocking page).

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2023-01-13 14:42:40 -03:00
RD WebDesign 2814556c16 Adding option to show all results for queryads
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2023-01-13 14:14:52 -03:00
RD WebDesign f8c121407d Allow only authenticated access to queryads.php
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-12-21 16:58:34 -03:00
Adam Warner fad5b4f30d Don't link to github releases if docker tag is nightly or dev
Signed-off-by: Adam Warner <me@adamwarner.co.uk>
2022-11-11 22:01:48 +00:00
Christian König 388c33b45b Remove obsolete loginpage
Signed-off-by: Christian König <ckoenig@posteo.de>
2022-11-09 23:10:33 +01:00
Christian König 7222e505ba Allow addding more than one local DNS/CNAME record
Signed-off-by: Christian König <ckoenig@posteo.de>
2022-10-21 11:23:54 +02:00
RD WebDesign 39f23fde76 Avoid cname loops
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-10-20 16:27:29 -03:00
RD WebDesign 31b94d122f Fix file pointer position if file was truncated
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-10-16 13:26:23 -03:00
Christian König c14c491ea5 Add chartjs-adapter-moment.js
Signed-off-by: Christian König <ckoenig@posteo.de>
2022-10-05 21:19:00 +02:00
RD WebDesignandGitHub db56914e80 Get port number directly from pihole-FTL.conf (#2371) 2022-09-22 14:36:37 -03:00
RD WebDesign 6e51ac3f85 Using htmlentities and rawurlencode on every output string
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-09-21 19:16:21 -03:00
RD WebDesign 2d346a1bc8 Remove all unwanted characters from $versions
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-09-21 19:16:21 -03:00
RD WebDesign 5c2d2f3446 Get port number directly from pihole-FTL.conf
- Remove the code using FTL portfile
- code simplification

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-09-21 18:59:09 -03:00
Christian König b948f4053c Remove additional space in Cookie header
Signed-off-by: Christian König <ckoenig@posteo.de>
2022-09-21 16:00:35 +02:00
Christian König e944c9d6c7 Allow the root zone . to be excluded from top lists
Signed-off-by: Christian König <ckoenig@posteo.de>
2022-09-20 16:22:23 +02:00
RD WebDesign 93db592f74 Add test to avoid PHP warning
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-09-17 02:16:49 -03:00
Christian König 63711dac08 Only assign if variable is set
Signed-off-by: Christian König <ckoenig@posteo.de>
2022-09-16 16:05:04 +02:00
Christian König 148aae4735 Read DOCKER_VERSION from version file instead of env variable
Signed-off-by: Christian König <ckoenig@posteo.de>
2022-09-16 15:24:22 +02:00
RD WebDesign fcdde5cf57 Avoid message warnings if session was already started.
fix #2350

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-09-13 18:47:13 -03:00
RD WebDesign e3b4cd9238 Fix LCARS visual and allow user selected checkbox theme
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-09-09 14:26:54 -03:00
RD WebDesign d12ef014e5 Use constants in place of class constants
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-09-08 23:47:09 -03:00
DL6ER c013618492 Set Samesite=Strict for PHP session cookie. The cookie is set manually to be backwards compatible with versions below PHP7.3
Signed-off-by: DL6ER <dl6er@dl6er.de>
2022-09-08 15:01:00 +02:00
Christian König e5ce53446c Do not apply IDNA conversion to regex domains
Signed-off-by: Christian König <ckoenig@posteo.de>
2022-09-07 21:48:03 +02:00
RD WebDesign a55ae95330 Check if the API call was made using authentication
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-09-03 19:07:21 -03:00
RD WebDesign b84c23e055 Declaring all strings to avoid warnings
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-09-03 17:12:10 -03:00
Adam Warner 4c8084c06c git pu 2022-09-02 22:04:22 +01:00
RD WebDesign 8aa2e52338 Never check for individual component updates on docker
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-08-30 15:05:57 -03:00
RD WebDesign e63c5de10d Complementing PR 2316
- other undefined vars are still spamming the log

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-08-29 18:21:24 -03:00
yubiuserandGitHub 775a4e1c6a Revert empty domain dot replacement (#2314) 2022-08-29 23:02:28 +02:00
RD WebDesign d3c59d42a7 Show "Logout" link only when a password is required
Re-introducing the test, removed when the menu was updated

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-08-29 14:53:38 -03:00
Christian König f4c264be86 Add special handling for the root zone on domain validation and IDNA conversion
Signed-off-by: Christian König <ckoenig@posteo.de>
2022-08-28 21:56:36 +02:00
RD WebDesign ae74023b72 Add test to avoid "Undefined Variable" warnings
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-08-28 16:37:56 -03:00
RD WebDesign d50c6bfc63 New check warnings logic
Changes:
- Show warning message on docker, if a new image is available;
- Never show the warning for Nightly or Dev images;
- In docker, never show individual component update warnings;
- simplified footer (logic moved to upgrade_checker file).

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-08-26 17:46:07 -03:00
RD WebDesign 22a19e5403 Move all "version check" code to update_checker.php
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-08-26 17:46:07 -03:00
RD WebDesign 2785775049 Check versions using the new file
- change the arrays
- use a function to compare versions

Signed-off-by: RD WebDesign <github@rdwebdesign.com.br>
2022-08-26 17:46:07 -03:00