WLED/wled00/data/settings_sec.htm

<!DOCTYPE html>
<html lang="en">
<head>
	<meta name="viewport" content="width=500">
	<meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" name="viewport"/>
	<meta charset="utf-8">
	<title>Misc Settings</title>
	<script>
		var d = document;
		function H() { window.open("https://kno.wled.ge/features/settings/#security-settings"); }
		function B() { window.open("/settings","_self"); }
		function U() { window.open("/update","_self"); }
		function gId(s) { return d.getElementById(s); }
		function isObj(o) { return (o && typeof o === 'object' && !Array.isArray(o)); }
		var timeout;
		function showToast(text, error = false)
		{
			var x = gId("toast");
			x.innerHTML = text;
			x.classList.add(error ? "error":"show");
			clearTimeout(timeout);
			x.style.animation = 'none';
			timeout = setTimeout(function(){ x.classList.remove("show"); }, 2900);
		}
		function uploadFile(fO,name) {
			var req = new XMLHttpRequest();
			req.addEventListener('load', function(){showToast(this.responseText,this.status >= 400)});
			req.addEventListener('error', function(e){showToast(e.stack,true);});
			req.open("POST", "/upload");
			var formData = new FormData();
			formData.append("data", fO.files[0], name);
			req.send(formData);
			fO.value = '';
			return false;
	    }
		function checkNum(o) {
			// numeric keys only
			if ([8,9,13,37,39,46,48,49,50,51,52,53,54,55,56,57,127].includes(event.keyCode)) return true;
			event.preventDefault();
			return false;
		}
		function GetV()
		{
			//values injected by server while sending HTML
		}
	</script>
	<style>
		@import url("style.css");
	</style>
</head>
<body onload="GetV()">
	<form id="form_s" name="Sf" method="post">
		<div class="toprow">
		<div class="helpB"><button type="button" onclick="H()">?</button></div>
		<button type="button" onclick="B()">Back</button><button type="submit">Save</button><hr>
		</div>
		<h2>Security & Update setup</h2>
		Settings PIN: <input type="password" name="PIN" size="4" maxlength="4" minlength="4" onkeydown="checkNum(this)"><br>
		Lock wireless (OTA) software update: <input type="checkbox" name="NO"><br>
		Passphrase: <input type="password" name="OP" maxlength="32"><br>
		To enable OTA, for security reasons you need to also enter the correct password!<br>
		The password should be changed when OTA is enabled.<br>
		<b>Disable OTA when not in use, otherwise an attacker can reflash device software!</b><br>
		<i>Settings on this page are only changable if OTA lock is disabled!</i><br>
		Deny access to WiFi settings if locked: <input type="checkbox" name="OW"><br><br>
		Factory reset: <input type="checkbox" name="RS"><br>
		All settings and presets will be erased.<br><br>
		HTTP traffic is unencrypted. An attacker in the same network can intercept form data!
		<hr>
		<h3>Software Update</h3>
		<button type="button" onclick="U()">Manual OTA Update</button><br>
		Enable ArduinoOTA: <input type="checkbox" name="AO">
		<hr>
		<h3>Backup & Restore</h3>
		<a class="btn lnk" href="/presets.json?download" target="download-frame">Backup presets</a><br>
		<div>Restore presets<br><input type="file" name="data" accept=".json"> <input type="button" value="Upload" onclick="uploadFile(d.Sf.data,'/presets.json');"><br></div><br>
		<a class="btn lnk" href="/cfg.json?download" target="download-frame">Backup configuration</a><br>
		<div>Restore configuration<br><input type="file" name="data2" accept=".json"> <input type="button" value="Upload" onclick="uploadFile(d.Sf.data2,'/cfg.json');"><br></div>
		<div style="color: #fa0;">&#9888; Restoring presets/configuration will OVERWRITE your current presets/configuration.<br>
		Incorrect configuration may require a factory reset or re-flashing of your ESP.</div>
		For security reasons, passwords are not backed up.
		<hr>
		<h3>About</h3>
		<a href="https://github.com/Aircoookie/WLED/" target="_blank">WLED</a> version ##VERSION##<!-- Autoreplaced from package.json --><br><br>
		<a href="https://github.com/Aircoookie/WLED/wiki/Contributors-and-credits" target="_blank">Contributors, dependencies and special thanks</a><br>
		A huge thank you to everyone who helped me create WLED!<br><br>
		(c) 2016-2022 Christian Schwinne <br>
		<i>Licensed under the <a href="https://github.com/Aircoookie/WLED/blob/master/LICENSE" target="_blank">MIT license</a></i><br><br>
		Server message: <span class="sip"> Response error! </span><hr>
		<div id="toast"></div>
		<button type="button" onclick="B()">Back</button><button type="submit">Save</button>
	</form>
	<iframe name=download-frame style='display:none;'></iframe>
</body>
</html>
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`<!DOCTYPE html>`
added lang attribute to the html start tag 2020-12-23 21:43:30 +01:00			`<html lang="en">`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`<head>`
			`<meta name="viewport" content="width=500">`
Prevent autozoom on input fields. 2021-12-08 14:38:21 +01:00			`<meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" name="viewport"/>`
Sync htm and fix js errors 2020-05-17 21:39:57 +02:00			`<meta charset="utf-8">`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`<title>Misc Settings</title>`
			`<script>`
Backup/restore presets & holiday array upload. Reduced number of segments on 8266. 2021-07-14 23:10:19 +02:00			`var d = document;`
Added: - generic settings.js handler - update info - numeric (not really) hidden PIN 2022-03-02 15:41:31 +01:00			`function H() { window.open("https://kno.wled.ge/features/settings/#security-settings"); }`
			`function B() { window.open("/settings","_self"); }`
			`function U() { window.open("/update","_self"); }`
			`function gId(s) { return d.getElementById(s); }`
			`function isObj(o) { return (o && typeof o === 'object' && !Array.isArray(o)); }`
Backup/restore presets & holiday array upload. Reduced number of segments on 8266. 2021-07-14 23:10:19 +02:00			`var timeout;`
			`function showToast(text, error = false)`
			`{`
			`var x = gId("toast");`
			`x.innerHTML = text;`
use classList add/remove instead of edit className with string functions 2021-10-04 00:41:50 +02:00			`x.classList.add(error ? "error":"show");`
Backup/restore presets & holiday array upload. Reduced number of segments on 8266. 2021-07-14 23:10:19 +02:00			`clearTimeout(timeout);`
			`x.style.animation = 'none';`
use classList add/remove instead of edit className with string functions 2021-10-04 00:41:50 +02:00			`timeout = setTimeout(function(){ x.classList.remove("show"); }, 2900);`
Backup/restore presets & holiday array upload. Reduced number of segments on 8266. 2021-07-14 23:10:19 +02:00			`}`
Attempt at forcing Save dialog on preset backup. Random BG image replaced by holiday BG. 2021-07-15 09:24:10 +02:00			`function uploadFile(fO,name) {`
Backup/restore presets & holiday array upload. Reduced number of segments on 8266. 2021-07-14 23:10:19 +02:00			`var req = new XMLHttpRequest();`
0.13.0-b3 2021-09-21 23:37:35 +02:00			`req.addEventListener('load', function(){showToast(this.responseText,this.status >= 400)});`
Backup/restore presets & holiday array upload. Reduced number of segments on 8266. 2021-07-14 23:10:19 +02:00			`req.addEventListener('error', function(e){showToast(e.stack,true);});`
			`req.open("POST", "/upload");`
			`var formData = new FormData();`
Attempt at forcing Save dialog on preset backup. Random BG image replaced by holiday BG. 2021-07-15 09:24:10 +02:00			`formData.append("data", fO.files[0], name);`
Backup/restore presets & holiday array upload. Reduced number of segments on 8266. 2021-07-14 23:10:19 +02:00			`req.send(formData);`
Attempt at forcing Save dialog on preset backup. Random BG image replaced by holiday BG. 2021-07-15 09:24:10 +02:00			`fO.value = '';`
Backup/restore presets & holiday array upload. Reduced number of segments on 8266. 2021-07-14 23:10:19 +02:00			`return false;`
			`}`
Added: - generic settings.js handler - update info - numeric (not really) hidden PIN 2022-03-02 15:41:31 +01:00			`function checkNum(o) {`
			`// numeric keys only`
			`if ([8,9,13,37,39,46,48,49,50,51,52,53,54,55,56,57,127].includes(event.keyCode)) return true;`
			`event.preventDefault();`
			`return false;`
			`}`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`function GetV()`
			`{`
			`//values injected by server while sending HTML`
			`}`
			`</script>`
			`<style>`
Minor changes to auto UI code generation Replace outdated CSS in HTML by style.css import Fix missing button double press in time settings FIx missing meta utf-8 in WiFi and UI settings Modify cdata.js to add an info header to the top of auto-generated files 2020-06-10 12:45:44 +02:00			`@import url("style.css");`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`</style>`
			`</head>`
			`<body onload="GetV()">`
			`<form id="form_s" name="Sf" method="post">`
Sticky save & back buttons. 2021-03-05 09:50:59 +01:00			`<div class="toprow">`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`<div class="helpB"><button type="button" onclick="H()">?</button></div>`
Settings PIN protection. 2022-03-01 23:37:28 +01:00			`<button type="button" onclick="B()">Back</button><button type="submit">Save</button><hr>`
Sticky save & back buttons. 2021-03-05 09:50:59 +01:00			`</div>`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`<h2>Security & Update setup</h2>`
Added: - generic settings.js handler - update info - numeric (not really) hidden PIN 2022-03-02 15:41:31 +01:00			`Settings PIN: <input type="password" name="PIN" size="4" maxlength="4" minlength="4" onkeydown="checkNum(this)"><br>`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`Lock wireless (OTA) software update: <input type="checkbox" name="NO"><br>`
			`Passphrase: <input type="password" name="OP" maxlength="32"><br>`
			`To enable OTA, for security reasons you need to also enter the correct password!<br>`
			`The password should be changed when OTA is enabled.<br>`
			`<b>Disable OTA when not in use, otherwise an attacker can reflash device software!</b><br>`
			`<i>Settings on this page are only changable if OTA lock is disabled!</i><br>`
			`Deny access to WiFi settings if locked: <input type="checkbox" name="OW"><br><br>`
			`Factory reset: <input type="checkbox" name="RS"><br>`
Added ability to add multiple busses as compile time defaults using the esp32_multistrip usermod define syntax 2021-04-15 10:55:22 +02:00			`All settings and presets will be erased.<br><br>`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`HTTP traffic is unencrypted. An attacker in the same network can intercept form data!`
Merge branch 'master' into dev 2021-08-19 21:57:04 +02:00			`<hr>`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`<h3>Software Update</h3>`
			`<button type="button" onclick="U()">Manual OTA Update</button><br>`
Settings PIN protection. 2022-03-01 23:37:28 +01:00			`Enable ArduinoOTA: <input type="checkbox" name="AO">`
			`<hr>`
Added missing ir.json error type. Hopefully fix for WS virtual disconnects. WS debugging info. 2021-07-25 22:44:26 +02:00			`<h3>Backup & Restore</h3>`
			`<a class="btn lnk" href="/presets.json?download" target="download-frame">Backup presets</a><br>`
Upload files & skinning (#2084) * Skinning WLED & uploading files. Backup & restore configuration & presets. External holidays.json * Option for segment count instead of stop. * Small fixes and improvements * Further improvements * Enable custom CSS by default Co-authored-by: Christian Schwinne <dev.aircoookie@gmail.com> 2021-07-26 00:10:36 +02:00			`<div>Restore presets<br><input type="file" name="data" accept=".json"> <input type="button" value="Upload" onclick="uploadFile(d.Sf.data,'/presets.json');"><br></div><br>`
Added missing ir.json error type. Hopefully fix for WS virtual disconnects. WS debugging info. 2021-07-25 22:44:26 +02:00			`<a class="btn lnk" href="/cfg.json?download" target="download-frame">Backup configuration</a><br>`
Upload files & skinning (#2084) * Skinning WLED & uploading files. Backup & restore configuration & presets. External holidays.json * Option for segment count instead of stop. * Small fixes and improvements * Further improvements * Enable custom CSS by default Co-authored-by: Christian Schwinne <dev.aircoookie@gmail.com> 2021-07-26 00:10:36 +02:00			`<div>Restore configuration<br><input type="file" name="data2" accept=".json"> <input type="button" value="Upload" onclick="uploadFile(d.Sf.data2,'/cfg.json');"><br></div>`
Added missing ir.json error type. Hopefully fix for WS virtual disconnects. WS debugging info. 2021-07-25 22:44:26 +02:00			`<div style="color: #fa0;">⚠ Restoring presets/configuration will OVERWRITE your current presets/configuration.<br>`
Upload files & skinning (#2084) * Skinning WLED & uploading files. Backup & restore configuration & presets. External holidays.json * Option for segment count instead of stop. * Small fixes and improvements * Further improvements * Enable custom CSS by default Co-authored-by: Christian Schwinne <dev.aircoookie@gmail.com> 2021-07-26 00:10:36 +02:00			`Incorrect configuration may require a factory reset or re-flashing of your ESP.</div>`
Added missing ir.json error type. Hopefully fix for WS virtual disconnects. WS debugging info. 2021-07-25 22:44:26 +02:00			`For security reasons, passwords are not backed up.`
Settings PIN protection. 2022-03-01 23:37:28 +01:00			`<hr>`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`<h3>About</h3>`
Replace repo url and version automatically in HTML 2020-06-08 19:59:40 +02:00			`<a href="https://github.com/Aircoookie/WLED/" target="_blank">WLED</a> version ##VERSION##<!-- Autoreplaced from package.json --><br><br>`
Fixed HTTP changing segments uncommanded (#1618) Replaced Red & Blue effect with Aurora effect (PR #1589) Updated copyright year and contributor page link 2021-01-05 21:35:07 +01:00			`<a href="https://github.com/Aircoookie/WLED/wiki/Contributors-and-credits" target="_blank">Contributors, dependencies and special thanks</a><br>`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`A huge thank you to everyone who helped me create WLED!<br><br>`
Update year 2022-01-21 01:48:50 +01:00			`(c) 2016-2022 Christian Schwinne <br>`
Add copyright and license link to .htm 2020-11-10 13:30:42 +01:00			`<i>Licensed under the <a href="https://github.com/Aircoookie/WLED/blob/master/LICENSE" target="_blank">MIT license</a></i><br><br>`
New web UI features 2020-05-02 01:59:41 +02:00			`Server message: <span class="sip"> Response error! </span><hr>`
Backup/restore presets & holiday array upload. Reduced number of segments on 8266. 2021-07-14 23:10:19 +02:00			`<div id="toast"></div>`
Settings PIN protection. 2022-03-01 23:37:28 +01:00			`<button type="button" onclick="B()">Back</button><button type="submit">Save</button>`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`</form>`
Attempt at forcing Save dialog on preset backup. Random BG image replaced by holiday BG. 2021-07-15 09:24:10 +02:00			`<iframe name=download-frame style='display:none;'></iframe>`
Converted UTF-16 files with UTF-8 and CR/LF to LF. 2019-11-27 22:28:13 +01:00			`</body>`
			`</html>`