bring protocols on NAT edit page more in line with rule edit page
Fix #3691, use curl instead of fetch to download update files
Bump version to 2.1.4
Escape this before running.
Add some protection to parameters that come through _GET
Escape argument on call to is_process_running too, also remove some unecessary mwexec() calls
Do not allow interface group name to be bigger than 15 chars, helps ticket #3208
Fix #3700 and other syntax issues:

- Remove -G parameter from pfctl since it doesn't exist anymore
- Initialize $old_router
- Fix sh syntax on variable assign, it couldn't have space before =
- Simplify logic
- Avoid flush states twice, if it was done on IP change, don't do it
  again if router also has changed
Revert "Fix #3700 and other syntax issues:"

This reverts commit e912bfae186b6b657daf52607f9d027f46be0478.
Fix sh syntax
Revert "Fix sh syntax"

This reverts commit cd49f9cd5d21a6592ba690cd315f19266092bee5.
Revert "Revert "Fix #3700 and other syntax issues:""

This reverts commit 4cc2ae78d3027c349969437f08a88b1fb88c9de8.
Be more precise to match members of a bridge interface, it should fix #3637
Do not expire already disabled users, it fixes #3644
Validate starttime and stoptime format
Be more careful with host parameter and make sure it's escaped when call shell functions
Escape parameters passed to shell_exec()
Remove useless code, variable is set again on next line
Make sure variables are escaped, also replace exec calls to run rm by unlink_if_exists()
Avoid directory traversal when reading package xml files, also check if file exists before try to read it