Marko Winkler 52a4acced8 Add interface validation and improve shell argument escaping ...

- Introduced validateInterface() to ensure only existing network interfaces are used
- Used escapeshellarg() for user-supplied interfaces in shell commands (iw, iwgetid)
- Replaced direct usage of $_POST['interface'] with validated fallback to RASPI_WIFI_AP_INTERFACE
- Improved code readability by reducing redundant assignments

2025-04-23 21:31:38 +02:00

..

about.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00

adblock.php

Check for presence of custom blocklist in RASPI_ADBLOCK_LISTPATH

2025-04-16 23:33:13 -07:00

admin.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00

authenticate.php

Refactor auth method: http basic > user login

2025-01-21 05:14:18 -08:00

autoload.php

Refactor + fixup autoloader

2025-03-25 05:14:29 -07:00

configure_client.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00

CSRF.php

Add validateRequest(), token check outside class

2025-03-26 04:00:34 -07:00

dashboard.php

Simplify getVpnManaged check with ternary operator

2025-03-25 14:04:29 -07:00

data_usage.php

Work in progress

2019-10-12 23:04:27 +01:00

defaults.php

Update release version

2025-04-17 05:44:30 -07:00

dhcp.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00

footer.php

Replace static labels w/ gettext() for locale support

2025-03-18 04:11:47 -07:00

functions.php

Add interface validation and improve shell argument escaping

2025-04-23 21:31:38 +02:00

get_clients.php

Update en_US locale w/ new messsages

2023-03-19 16:47:55 +01:00

hostapd.php

Add interface validation and improve shell argument escaping

2025-04-23 21:31:38 +02:00

internetRoute.php

Update regex for optional src attribute

2023-01-05 22:36:09 +01:00

locale.php

Fix: Evaluate HTTP_ACCEPT_LANGUAGE, check ['locale']

2025-03-20 02:08:54 -07:00

login.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00

navbar.php

Fix: Use null coalescing operator on user_id

2025-03-20 02:09:39 -07:00

networking.php

Apply autoloader support for status messages

2023-09-16 11:46:11 +02:00

openvpn.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00

page_actions.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00

provider.php

Update w/ code attribution - thx @easylo

2024-12-06 01:22:28 -08:00

restapi.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00

session.php

Decouple session from csrf handler, set initial lastActivity

2025-01-20 00:55:21 -08:00

sidebar.php

Refactor to use PluginManager public methods

2024-11-05 09:13:37 -08:00

sysstats.php

Set hostapd_led to warn when status is down

2025-03-17 03:28:32 -07:00

system.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00

wifi_functions.php

Add interface validation and improve shell argument escaping

2025-04-23 21:31:38 +02:00

wireguard.php

Revert "Accept $token object, pass to renderTemplate()"

2025-03-25 13:23:58 -07:00