90 Commits (0fac2e3f3aaaeaddf431f7877ebddb6372a00a42)

Author	SHA1	Message	Date
Morris Jobke	c86cac6a2b	use config.php value instead of version string	10 years ago
Robin McCorkell	2579999373	Add setup check for reverse proxy header configuration	11 years ago
Bjoern Schiessle	dc5e89e624	also block certificate management in the back-end if external storages are disabled for the user	11 years ago
Roeland Jago Douma	72ba67815e	Display warning in security & setup warnings if php version is EOL	11 years ago
Lukas Reschke	7f6c5e456b	Add unit tests	11 years ago
Bjoern Schiessle	2c8fa54881	set logger in constructor	11 years ago
Lukas Reschke	0d515de13e	Detect old NSS and OpenSSL versions ... This will detect old NSS and OpenSSL versions and show appropriate errors in the admin interface. Fixes https://github.com/owncloud/core/issues/17901	11 years ago
Bjoern Schiessle	3000f0125f	don't move keys if the key where already moved in a previous migration run	11 years ago
Morris Jobke	533a23611a	Handle returned null value in app level code ... * getApplication on OCSClient can also return null this is now handled properly * fixes #17587	11 years ago
Bjoern Schiessle	85c3b9d5cf	only cleanUp the remaining keys if the migration really finished succesfully	11 years ago
Lukas Reschke	1db047a336	Add missing version field	11 years ago
Joas Schilling	ae3d402dbc	Send OC version to appstore so it can reply with the right links	11 years ago
Lukas Reschke	30145c0b52	Also load enabled apps	11 years ago
Morris Jobke	f63915d0c8	update license headers and authors	11 years ago
Lukas Reschke	00a65e30ce	Request approved state for disabled apps with ocsid ... In case an application gets disabled the level is set to "experimental" if it does not contain a `shipped` tag. This can for example be reproduced by installing the documents app from the appstore and then disabling it. Or cloning an app from git. With this change the controller will now load the level of the application from the appstore if a valid OCSID has been provided. Fixes https://github.com/owncloud/core/issues/17003	11 years ago
Joas Schilling	171f86ca2e	Only sort by group name when LDAP is involved	11 years ago
Joas Schilling	5ca6ec7ead	Make "include update info" part of the cache key	11 years ago
Joas Schilling	580155abe7	Load the update information asyncroniously to fix the page load speed	11 years ago
Bjoern Schiessle	0de59acb49	only request encryption module for files which are not excluded	11 years ago
Lukas Reschke	bc6d17ed74	Add check for availability of /dev/urandom ... Without /dev/urandom being available to read the medium RNG will rely only on the following components on a Linux system: 1. MicroTime: microtime() . memory_get_usage() as seed and then a garbage collected microtime for loop 2. MTRand: chr((mt_rand() ^ mt_rand()) % 256) 3. Rand: chr((rand() ^ rand()) % 256) 4. UniqId: Plain uniqid() An adversary with the possibility to predict the seed used by the PHP process may thus be able to predict future tokens which is an unwanted behaviour. One should note that this behaviour is documented in our documentation to ensure that users get aware of this even without reading our documentation this will add a post setup check to the administrative interface. Thanks to David Black from d1b.org for bringing this again to our attention.	11 years ago
Joas Schilling	d683752b37	Sort user groups by group name and hide the user count	11 years ago
Lukas Reschke	a7a2579c89	Subadmin permissions are also not required	11 years ago
Lukas Reschke	cdeb2052bb	Add NoAdminRequired annotation ... Stupid mistake in master, fixes https://github.com/owncloud/core/issues/16288	11 years ago
Morris Jobke	5fd849f545	Allow user to set an empty email address ... * fixes #16057	11 years ago
Clark Tomlinson	3ef2e668ac	fixing recovery tooltip	11 years ago
Lukas Reschke	9bc48451b9	Adjust tests and statuscode	11 years ago
Lukas Reschke	20a6073a9f	Migrate personal certificate handling into AppFramework controllers ... Also added unit-tests and better error-handling	11 years ago
Bjoern Schiessle	d2ef73367c	allow user to start migration in admin settings if no external user back-ends are enabled	11 years ago
Joas Schilling	81ec1c8a1a	Remove hardcoded link to performance docs	11 years ago
Lukas Reschke	0816cf9142	Add experimental applications switch ... Allows administrators to disable or enabled experimental applications as well as show the trust level.	11 years ago
Lukas Reschke	65202d2a18	Add check for activated local memcache ... Also used the opportunity to refactor it into an AppFramework controller so that we can unit test it. Fixes https://github.com/owncloud/core/issues/14956	11 years ago
Thomas Müller	b5545932e7	use StreamResponse to download the log file - fixes #14268	11 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	11 years ago
Thomas Müller	79f012d262	remove unneeded status element from json response on /categories - fixes 15056	11 years ago
Robin Appelman	da4ad1c0a2	show a better error message when trying to create a user that already exists	11 years ago
Lukas Reschke	e32f1582c7	Show more detailed error message	11 years ago
Lukas Reschke	f92f3a1a6e	Incorporate review changes	11 years ago
Lukas Reschke	13486a5ada	Migrate to SwiftMail ... Replaces the OC_Mail and phpmailer with SwiftMail allowing us to mock it properly. Fixes the unit test execution on master on local machines and https://github.com/owncloud/core/issues/12014 Conflicts: 3rdparty lib/private/server.php lib/public/iservercontainer.php tests/lib/mail.php tests/settings/controller/mailsettingscontrollertest.php Conflicts: 3rdparty lib/private/mail.php lib/private/server.php lib/public/iservercontainer.php settings/ajax/lostpassword.php settings/application.php	11 years ago
Lukas Reschke	bbd5f28415	Let users configure security headers in their Webserver ... Doing this in the PHP code is not the right approach for multiple reasons: 1. A bug in the PHP code prevents them from being added to the response. 2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud) 3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations. This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.	11 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" ... This reverts commit 6a1a4880f0.	11 years ago
Thomas Müller	39d8406933	don't allow installation of already installed apps - fixes #14004	11 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	11 years ago
Thomas Müller	3c75a440a6	Return milliseconds instead of seconds for lastLogin - refs #14005	11 years ago
Lukas Reschke	fcd5056376	Consistent variable naming	11 years ago
Lukas Reschke	0f7634eadc	Switch to a factory and add unit tests	11 years ago
Joas Schilling	7bd7c20295	Check whether return is an error case before using it	11 years ago
Lukas Reschke	7e7dd92f6b	Add unit tests	11 years ago
Lukas Reschke	734dcc82dd	Fix subadmin listing of group ... Without this patch filtering for the "_everyone" (empty) group did not work for subadmins. Fixes itself.	11 years ago
Morris Jobke	9fbeaf0fd9	Add value if restore of data is possible for a user ... * reason: nice to know before password change in user management * restore is possible: * encryption is disabled * encryption is enabled, admin and user has checked the restore option * if not possible: * highlight users row in red once the admin wants to change the password * show also a little tipsy	11 years ago
Joas Schilling	039397bd31	Use setConfigs() instead of calling setConfig() multiple times	11 years ago