Commit Graph

68 Commits

Author SHA1 Message Date
glaszig 56097d5629 send proper csrf header 2019-08-08 00:14:12 +02:00
Bill Zimmerman f6f85d1c11
Merge pull request #356 from glaszig/security/always-verify-csrf-token
always verify csrf token for resource-modifying requests
2019-08-07 21:53:39 +02:00
glaszig c70433585a move all other favicon-types into dist/icons folder,
point to icons via link and meta tags,
leave favicon.ico in root old browsers,
added custom jekyll layout file to use the icons
for the project website as well.

https://help.github.com/en/articles/customizing-css-and-html-in-your-jekyll-theme
https://github.com/pages-themes/minimal/blob/master/_layouts/default.html
https://stackoverflow.com/a/48969053
2019-08-06 22:24:13 +02:00
glaszig 2104ccb91a favicons and sorts can stay in subdirectories
and be pointed to by proper meta tags.
do not copy these around during installation and poison the git tree.
2019-08-06 21:36:52 +02:00
glaszig da69d3d768 send CSRF token in a response header,
update the page's CSRF tokens with the new token
from the response header,
verify csrf token in ajax endpoints,
initialize a session for every endpoint
2019-08-06 21:34:58 +02:00
glaszig b9e9b7fe39 move csrf token initialization into function 2019-08-06 20:55:16 +02:00
glaszig d53517a34a removed useless line of code 2019-08-06 20:55:16 +02:00
glaszig 20bb9fe42f add csrf meta tag (for use with xhr, for example) 2019-08-06 20:55:16 +02:00
glaszig f989b8060b always verify csrf token for resource-modifying requests,
that is post, put, patch, delete
2019-08-06 20:55:16 +02:00
Bill Zimmerman 470d6ac707 Updated minor version 2019-06-12 21:14:26 +02:00
billz a179ef05e0 Updated with hi-res icons. Resolves #321 2019-04-23 21:30:00 +00:00
billz dd63294a37 Updated version number 2019-04-13 15:19:13 +00:00
billz c0570b616e Processed with phpcs for PSR-2 coding standard 2019-04-10 08:37:35 +00:00
Bill Zimmerman 96717deea1
Merge pull request #297 from billz/wificlient-ap
Wifi client AP mode
2019-04-08 20:22:02 +02:00
billz 1e5dd6011b Updated with about page 2019-03-15 12:39:03 +00:00
billz 6b0373dee5 Added bootstrap-toggle css+js 2019-03-06 10:43:36 +00:00
billz d1edf51c82 Added option to enable/disable wifi client config 2019-01-27 20:23:57 +00:00
D9ping 3bf4a74f3b Renamed bandwidth.php to data_usage.php.
Removed unused status_messages.php include in data_usage.php.
Use single quote style in bandwidthcharts.js.

Signed-off-by: D9ping <D9ping@users.noreply.github.com>
2018-09-14 01:06:13 +02:00
D9ping 23d2718854 Renamed vnstat.php to bandwidth.php.
Disabled bandwidth page by default.

Signed-off-by: D9ping <D9ping@users.noreply.github.com>
2018-09-11 16:15:31 +02:00
D9ping 7b2f42f326 Added Morris.Js chart and jquery.datatable to bandwidth page.
Use ajax for getting bandwidth data.
Added support for adding extra scripts in footer if needed.

Signed-off-by: D9ping <D9ping@users.noreply.github.com>
2018-09-10 16:53:05 +02:00
D9ping 6d37fd79fa Added RASPI_VNSTAT_ENABLED to config.php.
Signed-off-by: D9ping <D9ping@users.noreply.github.com>
2018-08-24 21:16:05 +02:00
D9ping d6d89df024 Display bandwidth use total per day, week, month from vnstat.
Signed-off-by: D9ping <D9ping@users.noreply.github.com>
2018-08-21 16:42:04 +02:00
D9ping a86c8e4553 Fix for #211.
Signed-off-by: D9ping <D9ping@users.noreply.github.com>
2018-07-31 23:51:15 +02:00
billz 74842aac62 Minor nav label change 2018-05-29 22:44:18 +00:00
billz c1fab759e4 Moved session_start() before includes 2018-05-29 18:52:41 +00:00
Bill Zimmerman e29dc74e06 Fix indents 2018-05-27 22:41:21 +02:00
billz 23b7a76c6a Replaced strings with gettext() alias 2018-05-27 15:52:14 +00:00
Bill Zimmerman d8f4f15db8
Merge branch 'master' into i18n 2018-05-27 10:42:54 +02:00
billz 2176988898 Updated with minified sb-admin-2.css 2018-03-09 10:08:52 +00:00
billz 902281294f Added vendor directory & gulp support for better dependency organization + compiling less & js files. added gulp
support for a browser sync task as well for easier development
2018-03-09 02:03:53 +00:00
Emmanuel Geoffray 3bcf16a3ba add globals to select visible services 2017-12-07 19:12:35 +00:00
billz f6cfd65a55 Moved sublevel item to top level (for now) 2017-11-04 20:23:55 +00:00
Lawrence 8d77295fd3 Updated sudoers to accomodate restarting dhcpcd to apply network settings.
Updated installer to insert new lines
Created files to generate / modify / save dhcpcd files and networking configuration
2017-10-30 02:21:34 +08:00
Lawrence 6e786e41c2 Updating index to create new menu, custom.js with new code, moved config parameters from index.php to its own file 2017-10-29 12:31:51 +08:00
Lawrence d42e265365 Updated version number to reflect big functionality update 2017-10-28 02:44:45 +08:00
Lawrence fe60945949 Removed commented out code from index.php. configuratin parameters have been moved to includes/config.php 2017-10-28 02:42:40 +08:00
Lawrence 7749b79e2f Implemented start of web interface to update Static IP addresses or use DHCP.
Currently saves to files in /etc/raspap/networking, still need to build something to generate a working config for dhcpcd
2017-10-28 02:40:30 +08:00
billz 1212ef51f7 Added constants for locales 2017-10-23 20:02:39 +00:00
billz 062d5aeb4f Replaced interface labels with gettext() 2017-10-23 19:51:34 +00:00
billz 6fb18e1649 Added gettext for i18n support 2017-10-23 17:37:59 +00:00
Lawrence 64a7cb9d62 Merging upstream to repo 2017-10-23 00:27:33 +08:00
Lawrence 77316709e1 Creating networking interface to change between Static / Dynamic IPs 2017-10-23 00:26:49 +08:00
Lawrence 5c6991dfe5 Merge pull request #119 from SirLagz/master
Added a Web Console
2017-10-21 20:35:37 +08:00
Lawrence a24d3d8f86 Moved RASPI_ADMIN_DETAILS file check to the admin.php page which will now create the file if it doesn't exist - to resolve #116. Commented out check on index.php 2017-10-14 11:36:42 +08:00
billz 8a501c075f Persist selected theme in dropdown 2017-10-09 14:04:59 +00:00
billz 508110a9c0 Support for themes 2017-10-06 23:08:06 +00:00
Lawrence ecdf34467b Updating version and sudoers 2017-10-04 01:34:44 +08:00
Lawrence 0be196d708 Updated version numbers. Fixed up Sudoers file to include latest ip commands. 2017-10-04 01:06:47 +08:00
Lawrence 18fa472d2c Fixed email address typo 2017-10-03 12:32:30 +08:00
Lawrence 61d450d1c7 Fixed up a whole bunch of undefined variable warnings. Added a check to make sure raspap.auth exists before trying to include it. 2017-10-02 03:10:04 +08:00