e188cb6fbc
Revert "Merge pull request #267 from pi-hole/folderStructure"
...
This reverts commit fba3d10fa44ee75f4167
2016-12-21 17:16:52 +01:00
bb2c2e2244
Moved more private files out of the root directory
2016-12-20 12:52:19 +01:00
d1da1de597
Move PHP scripts to scripts folder
2016-12-19 19:44:51 -05:00
6a13796d99
Organise folder structure a bit better... Seperates vendor packages from self-written scripts.
2016-12-19 18:30:16 +00:00
b4b06ab81e
Merge pull request #260 from pi-hole/noDNSprefetching
...
No DNS prefetching
2016-12-18 17:29:29 -05:00
7784341c29
Update header.php
2016-12-17 20:18:11 +01:00
4dc937bd54
Disable DNS prefetching
2016-12-17 17:39:42 +01:00
1044879218
Merge branch 'devel' into loginpage
2016-12-16 18:11:10 +01:00
cd1c57a8f9
Improved memory usage determination
2016-12-16 12:19:16 +01:00
172d63a049
Merge branch 'devel' into loginpage
2016-12-14 23:31:48 +01:00
ea1645f562
Apply change of layout immediately and use this state to check the checkbox
2016-12-13 17:16:29 +01:00
b0556852cb
Add "Interface appearence" option
2016-12-13 14:58:47 +01:00
9cff0d41bc
Fix wrong comment
2016-12-13 12:09:02 +01:00
f01c441783
Removed changing of CPU temperature unit from Help Center
2016-12-12 13:17:37 +01:00
bade1ad0ad
Add "Settings" to main navigation
2016-12-10 21:04:17 +01:00
9c7dc19d80
Add custom login page
2016-12-08 16:39:44 +01:00
0dec4b8aa0
Protect Enable/Disable with a CSRF token check
...
The token is now added for all pages.
2016-12-04 13:16:45 -05:00
ee0913a7a2
Move enable/disable to API
...
Also check CORS for all API calls. With the same import, we can
enable CSRF token checking on the API.
2016-12-03 13:40:04 -05:00
40c6ee9f5a
Remove strict flag and change Host check
...
Since the Host header is easily manipulated, we can only check if
it's wrong and can't use it to validate that the client is authorized,
only unauthorized. There's no need for the strict flag anymore
because of this.
2016-12-02 16:06:43 -05:00
6b8fa7dbe4
Merge remote-tracking branch 'origin/devel' into secure-pause-resume
...
Conflicts:
header.php
2016-12-01 20:47:04 -05:00
9dfe10fd01
Changed a comment
2016-11-24 12:58:28 +01:00
fbe715c338
Small fix in password.php: Verify that there is a password hash before trying to access it
2016-11-24 12:54:26 +01:00
35f250352f
Small fix for header.php (prevent accumulation of "PHP Notice: Undefined index: TEMPERATUREUNIT" in lighttpd's error.log)
2016-11-24 12:47:56 +01:00
f3fa7ff8fa
Show 'Help' only if authorized
2016-11-23 18:08:19 +01:00
d9adcccbc3
Merge branch 'devel' into auth
...
Conflicts:
header.php
2016-11-23 18:02:40 +01:00
f8442e954e
Merge pull request #209 from DL6ER/queryads
...
Query list of ad-serving domains via Web UI
2016-11-23 11:35:15 -05:00
7f7604a6af
Add "Query adlists" feature
2016-11-22 15:23:30 +01:00
eedb141549
Add "Update Lists" section
2016-11-22 13:23:38 +01:00
d19048f5e6
Add changing of temperature unit from the web UI
2016-11-22 12:44:01 +01:00
87f5cc1009
Add "Help" to main navigation
2016-11-22 12:19:39 +01:00
3dea0cf937
Moved Donate item outside of $auth scope on the main menu
2016-11-21 10:52:56 +01:00
1cf031ab68
Show "-- : --" if session timer has expired. Show session timer only if user is logged in.
2016-11-20 21:14:34 +01:00
829c8544db
Completely hide session timer if there is no session (i.e. no password set)
2016-11-20 21:09:00 +01:00
0cd099f6f1
Added session timer
2016-11-20 21:05:08 +01:00
cd75d7e7a3
Remove hash from the javascript scripts.
2016-11-20 15:34:03 +01:00
02dc741209
Move from GET to SESSION variables for the sake of convenience
2016-11-20 15:27:35 +01:00
05c8522d4f
standalone mode for iOS
...
This will make the admin page look more like a native iOS application when started from Home Screen on iOS. It also won't create a tab in iOS Safari and will make spaceflight more convenient. See *Hiding Safari User Interface Components* on:
https://developer.apple.com/library/content/documentation/AppleApplications/Reference/SafariWebContent/ConfiguringWebApplications/ConfiguringWebApplications.html
2016-11-20 15:17:20 +01:00
2c93be0174
Extended current password protection to gravity.sh page
2016-11-20 14:52:53 +01:00
6781fa7919
Merge branch 'devel' into auth
2016-11-20 14:47:25 +01:00
aad1b65a82
Added comments to header.php
2016-11-19 13:01:55 +01:00
8ecd218908
Many changes that are documented in PR #197
2016-11-18 21:31:30 +01:00
66e4da7724
Run gravity.sh from the web UI
2016-11-18 13:43:05 +01:00
ef38679050
Merge branch 'devel' into auth
2016-11-18 12:35:41 +01:00
b2b93e90b3
Add flag for strict CORS
...
Prevents enable/disable from requests without CORS info
2016-11-17 16:47:14 -05:00
4372c2e25b
Extend hash auth to API calls
2016-11-16 23:35:10 +01:00
9fd67a0cce
Merge branch 'devel' into loaddisplay
...
Conflicts:
header.php
2016-11-16 23:16:22 +01:00
8c278f3853
Resolve merge conflict from updateing devel branch
2016-11-16 23:12:00 +01:00
08aab09f79
Merge branch 'devel' into auth
...
Conflicts:
header.php
2016-11-16 23:11:20 +01:00
dc03f93940
Capitalized variable name
2016-11-16 22:32:48 +01:00
41fe76c5ac
Capitalized variable name
2016-11-16 22:29:44 +01:00
DL6ER
DL6ER
Mcat12
Promofaux
DL6ER
J den Hartog