DL6ER
d7eada8156
Remove "Remember me for 7 days" checkbox. Each user gets their own independent session. By default, the session will expire after 5 minutes of no web interface being open (otherwise, it is continuously prolonged because of all the background API activity while refreshing the statistics). This timeout, however, can be set freely in pihole.toml and soon also in the web interface so this checkbox has stoped being useful.
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-02-03 18:07:11 +01:00
DL6ER
cb90e604e8
Add system information on first tab of the settings page
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-02-01 22:59:12 +01:00
DL6ER
9464cf5d9b
Remove db_queries.php. The Query Log has now builtin support for arbitrary time intervals
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-02-01 22:43:52 +01:00
DL6ER
afd08593dd
Use FTL-provided fileversion() function
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-02-01 22:39:43 +01:00
DL6ER
4eb9a4cf29
Port dashboard landing page to v6.0 API
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-31 20:41:12 +01:00
DL6ER
4cf7a82713
First steps into the v6.0 world. Login and logout is now possible and all pages load without PHP errors (even when they are mostly empty until we added all the new API methods)
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-01-31 20:10:53 +01:00
Adam Warner
8025a38aca
Fix PHP-CS-Fixer complaints
2023-01-25 19:00:20 +00:00
Adam Warner and GitHub
a998f51f2b
Merge pull request from GHSA-33w4-xf7m-f82m
...
Fix Improper Session Handling vulnerability of "Remember me for 7 days" functionality
2023-01-25 18:53:00 +00:00
4n4nk3 and 4n4nk3
d31cf9d156
Fix insecure persistent login token
...
Signed-off-by: 4n4nk3 <47717886+4n4nk3@users.noreply.github.com >
2023-01-22 23:55:54 +01:00
Adam Warner and GitHub
124d12ea37
Do not return 'false' if IDNA<->UNICODE conversion fails ( #2479 )
2023-01-22 14:10:50 +00:00
Glenn Strauss and Adam Warner
d94d86bad8
remove hard-coded /admin/ path; relocatable
...
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com >
2023-01-22 12:46:34 +00:00
Christian König
68ac05fb7e
Do not fail if IDNA<->UNICODE conversion fails
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-01-20 17:04:30 +01:00
Christian König and ElectronicsTinkerer
a5eb854129
Add default value for $ver in func.php
...
Signed-off-by: Christian König <ckoenig@posteo.de >
Co-authored-by: ElectronicsTinkerer <ElectronicsTinkerer@users.noreply.github.com >
2023-01-16 23:02:24 +01:00
RD WebDesign
302a402277
Avoid caching issues using last modified time
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2023-01-13 23:10:15 -03:00
RD WebDesign
839836d848
Highlight the searched text
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2023-01-13 15:15:17 -03:00
RD WebDesign
9c62cc5225
Remove unused/dead old code
...
- "quiet" option and related functions (used by blocking page);
- "adlist" option (used by blocking page).
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2023-01-13 14:42:40 -03:00
RD WebDesign
2814556c16
Adding option to show all results for queryads
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2023-01-13 14:14:52 -03:00
RD WebDesign
f8c121407d
Allow only authenticated access to queryads.php
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-12-21 16:58:34 -03:00
Adam Warner
fad5b4f30d
Don't link to github releases if docker tag is nightly or dev
...
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
2022-11-11 22:01:48 +00:00
Christian König
388c33b45b
Remove obsolete loginpage
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2022-11-09 23:10:33 +01:00
Christian König
7222e505ba
Allow addding more than one local DNS/CNAME record
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2022-10-21 11:23:54 +02:00
RD WebDesign
39f23fde76
Avoid cname loops
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-10-20 16:27:29 -03:00
RD WebDesign
31b94d122f
Fix file pointer position if file was truncated
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-10-16 13:26:23 -03:00
Christian König
c14c491ea5
Add chartjs-adapter-moment.js
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2022-10-05 21:19:00 +02:00
RD WebDesign and GitHub
db56914e80
Get port number directly from pihole-FTL.conf ( #2371 )
2022-09-22 14:36:37 -03:00
RD WebDesign
6e51ac3f85
Using htmlentities and rawurlencode on every output string
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-09-21 19:16:21 -03:00
RD WebDesign
2d346a1bc8
Remove all unwanted characters from $versions
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-09-21 19:16:21 -03:00
RD WebDesign
5c2d2f3446
Get port number directly from pihole-FTL.conf
...
- Remove the code using FTL portfile
- code simplification
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-09-21 18:59:09 -03:00
Christian König
b948f4053c
Remove additional space in Cookie header
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2022-09-21 16:00:35 +02:00
Christian König
e944c9d6c7
Allow the root zone . to be excluded from top lists
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2022-09-20 16:22:23 +02:00
RD WebDesign
93db592f74
Add test to avoid PHP warning
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-09-17 02:16:49 -03:00
Christian König
63711dac08
Only assign if variable is set
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2022-09-16 16:05:04 +02:00
Christian König
148aae4735
Read DOCKER_VERSION from version file instead of env variable
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2022-09-16 15:24:22 +02:00
RD WebDesign
fcdde5cf57
Avoid message warnings if session was already started.
...
fix #2350
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-09-13 18:47:13 -03:00
RD WebDesign
e3b4cd9238
Fix LCARS visual and allow user selected checkbox theme
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-09-09 14:26:54 -03:00
RD WebDesign
d12ef014e5
Use constants in place of class constants
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-09-08 23:47:09 -03:00
DL6ER
c013618492
Set Samesite=Strict for PHP session cookie. The cookie is set manually to be backwards compatible with versions below PHP7.3
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2022-09-08 15:01:00 +02:00
Christian König
e5ce53446c
Do not apply IDNA conversion to regex domains
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2022-09-07 21:48:03 +02:00
RD WebDesign
a55ae95330
Check if the API call was made using authentication
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-09-03 19:07:21 -03:00
RD WebDesign
b84c23e055
Declaring all strings to avoid warnings
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-09-03 17:12:10 -03:00
Adam Warner
4c8084c06c
git pu
2022-09-02 22:04:22 +01:00
RD WebDesign
8aa2e52338
Never check for individual component updates on docker
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-08-30 15:05:57 -03:00
RD WebDesign
e63c5de10d
Complementing PR 2316
...
- other undefined vars are still spamming the log
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-08-29 18:21:24 -03:00
yubiuser and GitHub
775a4e1c6a
Revert empty domain dot replacement ( #2314 )
2022-08-29 23:02:28 +02:00
RD WebDesign
d3c59d42a7
Show "Logout" link only when a password is required
...
Re-introducing the test, removed when the menu was updated
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-08-29 14:53:38 -03:00
Christian König
f4c264be86
Add special handling for the root zone on domain validation and IDNA conversion
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2022-08-28 21:56:36 +02:00
RD WebDesign
ae74023b72
Add test to avoid "Undefined Variable" warnings
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-08-28 16:37:56 -03:00
RD WebDesign
d50c6bfc63
New check warnings logic
...
Changes:
- Show warning message on docker, if a new image is available;
- Never show the warning for Nightly or Dev images;
- In docker, never show individual component update warnings;
- simplified footer (logic moved to upgrade_checker file).
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-08-26 17:46:07 -03:00
RD WebDesign
22a19e5403
Move all "version check" code to update_checker.php
...
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-08-26 17:46:07 -03:00
RD WebDesign
2785775049
Check versions using the new file
...
- change the arrays
- use a function to compare versions
Signed-off-by: RD WebDesign <github@rdwebdesign.com.br >
2022-08-26 17:46:07 -03:00