DL6ER
e188cb6fbc
Revert "Merge pull request #267 from pi-hole/folderStructure"
...
This reverts commit fba3d10fa4 , reversing
changes made to 4ee75f4167 .
2016-12-21 17:16:52 +01:00
DL6ER
bb2c2e2244
Moved more private files out of the root directory
2016-12-20 12:52:19 +01:00
Mcat12
d1da1de597
Move PHP scripts to scripts folder
2016-12-19 19:44:51 -05:00
Promofaux
6a13796d99
Organise folder structure a bit better... Seperates vendor packages from self-written scripts.
2016-12-19 18:30:16 +00:00
Mcat12
b4b06ab81e
Merge pull request #260 from pi-hole/noDNSprefetching
...
No DNS prefetching
2016-12-18 17:29:29 -05:00
DL6ER
7784341c29
Update header.php
2016-12-17 20:18:11 +01:00
DL6ER
4dc937bd54
Disable DNS prefetching
2016-12-17 17:39:42 +01:00
DL6ER
1044879218
Merge branch 'devel' into loginpage
2016-12-16 18:11:10 +01:00
DL6ER
cd1c57a8f9
Improved memory usage determination
2016-12-16 12:19:16 +01:00
DL6ER
172d63a049
Merge branch 'devel' into loginpage
2016-12-14 23:31:48 +01:00
DL6ER
ea1645f562
Apply change of layout immediately and use this state to check the checkbox
2016-12-13 17:16:29 +01:00
DL6ER
b0556852cb
Add "Interface appearence" option
2016-12-13 14:58:47 +01:00
DL6ER
9cff0d41bc
Fix wrong comment
2016-12-13 12:09:02 +01:00
DL6ER
f01c441783
Removed changing of CPU temperature unit from Help Center
2016-12-12 13:17:37 +01:00
DL6ER
bade1ad0ad
Add "Settings" to main navigation
2016-12-10 21:04:17 +01:00
DL6ER
9c7dc19d80
Add custom login page
2016-12-08 16:39:44 +01:00
Mcat12
0dec4b8aa0
Protect Enable/Disable with a CSRF token check
...
The token is now added for all pages.
2016-12-04 13:16:45 -05:00
Mcat12
ee0913a7a2
Move enable/disable to API
...
Also check CORS for all API calls. With the same import, we can
enable CSRF token checking on the API.
2016-12-03 13:40:04 -05:00
Mcat12
40c6ee9f5a
Remove strict flag and change Host check
...
Since the Host header is easily manipulated, we can only check if
it's wrong and can't use it to validate that the client is authorized,
only unauthorized. There's no need for the strict flag anymore
because of this.
2016-12-02 16:06:43 -05:00
Mcat12
6b8fa7dbe4
Merge remote-tracking branch 'origin/devel' into secure-pause-resume
...
Conflicts:
header.php
2016-12-01 20:47:04 -05:00
DL6ER
9dfe10fd01
Changed a comment
2016-11-24 12:58:28 +01:00
DL6ER
fbe715c338
Small fix in password.php: Verify that there is a password hash before trying to access it
2016-11-24 12:54:26 +01:00
DL6ER
35f250352f
Small fix for header.php (prevent accumulation of "PHP Notice: Undefined index: TEMPERATUREUNIT" in lighttpd's error.log)
2016-11-24 12:47:56 +01:00
DL6ER
f3fa7ff8fa
Show 'Help' only if authorized
2016-11-23 18:08:19 +01:00
DL6ER
d9adcccbc3
Merge branch 'devel' into auth
...
Conflicts:
header.php
2016-11-23 18:02:40 +01:00
Mcat12
f8442e954e
Merge pull request #209 from DL6ER/queryads
...
Query list of ad-serving domains via Web UI
2016-11-23 11:35:15 -05:00
DL6ER
7f7604a6af
Add "Query adlists" feature
2016-11-22 15:23:30 +01:00
DL6ER
eedb141549
Add "Update Lists" section
2016-11-22 13:23:38 +01:00
DL6ER
d19048f5e6
Add changing of temperature unit from the web UI
2016-11-22 12:44:01 +01:00
DL6ER
87f5cc1009
Add "Help" to main navigation
2016-11-22 12:19:39 +01:00
DL6ER
3dea0cf937
Moved Donate item outside of $auth scope on the main menu
2016-11-21 10:52:56 +01:00
DL6ER
1cf031ab68
Show "-- : --" if session timer has expired. Show session timer only if user is logged in.
2016-11-20 21:14:34 +01:00
DL6ER
829c8544db
Completely hide session timer if there is no session (i.e. no password set)
2016-11-20 21:09:00 +01:00
DL6ER
0cd099f6f1
Added session timer
2016-11-20 21:05:08 +01:00
DL6ER
cd75d7e7a3
Remove hash from the javascript scripts.
2016-11-20 15:34:03 +01:00
DL6ER
02dc741209
Move from GET to SESSION variables for the sake of convenience
2016-11-20 15:27:35 +01:00
J den Hartog
05c8522d4f
standalone mode for iOS
...
This will make the admin page look more like a native iOS application when started from Home Screen on iOS. It also won't create a tab in iOS Safari and will make spaceflight more convenient. See *Hiding Safari User Interface Components* on:
https://developer.apple.com/library/content/documentation/AppleApplications/Reference/SafariWebContent/ConfiguringWebApplications/ConfiguringWebApplications.html
2016-11-20 15:17:20 +01:00
DL6ER
2c93be0174
Extended current password protection to gravity.sh page
2016-11-20 14:52:53 +01:00
DL6ER
6781fa7919
Merge branch 'devel' into auth
2016-11-20 14:47:25 +01:00
DL6ER
aad1b65a82
Added comments to header.php
2016-11-19 13:01:55 +01:00
DL6ER
8ecd218908
Many changes that are documented in PR #197
2016-11-18 21:31:30 +01:00
DL6ER
66e4da7724
Run gravity.sh from the web UI
2016-11-18 13:43:05 +01:00
DL6ER
ef38679050
Merge branch 'devel' into auth
2016-11-18 12:35:41 +01:00
Mcat12
b2b93e90b3
Add flag for strict CORS
...
Prevents enable/disable from requests without CORS info
2016-11-17 16:47:14 -05:00
DL6ER
4372c2e25b
Extend hash auth to API calls
2016-11-16 23:35:10 +01:00
DL6ER
9fd67a0cce
Merge branch 'devel' into loaddisplay
...
Conflicts:
header.php
2016-11-16 23:16:22 +01:00
DL6ER
8c278f3853
Resolve merge conflict from updateing devel branch
2016-11-16 23:12:00 +01:00
DL6ER
08aab09f79
Merge branch 'devel' into auth
...
Conflicts:
header.php
2016-11-16 23:11:20 +01:00
DL6ER
dc03f93940
Capitalized variable name
2016-11-16 22:32:48 +01:00
DL6ER
41fe76c5ac
Capitalized variable name
2016-11-16 22:29:44 +01:00