5bfe4adbaa
Whitespace cleanup
12 years ago
eab6d7eb23
Enhanced auth is totally unmaintained and broken
...
Let's remove it, it's also not secure anymore with the introduction of
our API etc...
(And doesn't work with ldap etc…)
12 years ago
31b1a73e1f
Check if user is admin - bool
...
There was no "isAdminUser()" function which returned bool. This is
irritiating as there were a loooooooot of places in the code which
checked this itself with `OC_Group::inGroup($uid, 'admin)` - why not
use a function for this?
(Especially if you consider that we might change the group name in the
future, which would lead to problems then)
Additionally, @Raydiation needed such a method for his AppFramework :)
12 years ago
30d7993e01
Checkstyle fixes: NoSpaceAfterComma
13 years ago
afadf93d31
Checkstyle: many fixes
13 years ago
65619af05b
Disable enhancedauth by default
...
Admins can still enable it via config.php
13 years ago
8b01286a5d
Merged branch 'master'
13 years ago
e299c241df
Make enhanced auth configurable
13 years ago
6f2e8788ca
Make enhanced auth time configurable
13 years ago
f4142bd2a8
Move isUserVerified to OC_Util
13 years ago
77e18b01ba
Move the ( to the right position
13 years ago
91d4b23efe
Fix PHP notice
13 years ago
097f429816
Add isUserVerified()
13 years ago
1c865f702c
Change verifyUser so that external json files can call it
13 years ago
4d7b0e9bb3
verifyUser() for the json part
13 years ago
3829460ab8
adding space between) and {
13 years ago
58b1e841f1
fix translations within subfolder /lib
13 years ago
52f2e7112e
Whitespace fixes in lib
13 years ago
856d9c0b54
some indention fixes
13 years ago
a5bebb86a5
add checkSubAdminUser method to OC_JSON class
13 years ago
90331a3fa1
Remove forced download
13 years ago
0465129eba
Remove the forced download§
13 years ago
fa7d4c2b39
Disable mimesniffing
13 years ago
4e63981da9
Disable mimesniffing
13 years ago
50667dcb82
Convert OC_L10N_String to a string in OC_JSON::encodedPrint
13 years ago
625cd822c3
Backport CSRF prevention.
13 years ago
89464721c7
Added JSON methods for CSRF prevention. Make request token accessible from template and add js var.
13 years ago
a332c39472
Check if path_info is empty as well, fixes bug oc-632. Thanks to die3lustigen2.
13 years ago
d9fbdae758
Prevent XSS exploit by checking if path-info is set, thanks to Lukas Reschke
13 years ago
b1bcc60d83
reuse OC_L10N objects
13 years ago
f4782a7690
Check if the application is actually enabled
14 years ago
19d4121763
Change json content-type to correct IANA type
14 years ago
bcf92badd1
dont set content type to json for Apps
14 years ago
17e631bc5e
Use OC_JSON for json responses
...
Create OC_JSON class, for single point of creating json responses.
No real logic change, this just cleans up the code a bit.
14 years ago
Bart Visscher