305 Commits (17d466b03b91ccc058fe1a88340df36c22a580c2)

Author	SHA1	Message	Date
Lukas Reschke	f6b6780072	Don't use OC_Setup as it will show up the installer	13 years ago
Lukas Reschke	6903475841	Generate .htaccess when upgrading from old versions ... When upgrading from old ownCloud versions like 2.x the .htaccess is not generated - which exposes the data to the internet. This fix will generate a .htaccess when upgrading. (And no one exists) Fixes #127	13 years ago
Bart Visscher	fecfeac55d	Fix introduced style errors	13 years ago
Bart Visscher	43e8293d9c	Change Symfony/Component/Routing from submodule to composer fetching	13 years ago
Felix Moeller	6a00a6b9ed	Make Jenkins more happy. ... This is NoSpaceAfterComma	13 years ago
Susinthiran Sithamparanathan	b2b84f3a6f	Update Sabre to version 1.7.1	13 years ago
Lukas Reschke	de7b46c66a	Use `get_magic_quotes_gpc()` to determine if magic_quotes is enabled ... set_magic_quotes_runtime gives a PHP warning	13 years ago
Michael Göhler	8be9c04a3a	128byte is not 128bit - now we realy use 256bit (same as PHPSESSID)	13 years ago
Michael Göhler	ae1f33db54	implement fixed php session timeout and session id regeneration	13 years ago
Michael Göhler	b92fd984aa	removed username and password from token generation	13 years ago
Michael Göhler	a6c4046f48	fixed typo and redundant method call	13 years ago
Michael Göhler	d8fe6fbb40	added a warning message to the log when a cookie is rejected	13 years ago
Michael Göhler	382f8d060c	fixed wrong variable usage	13 years ago
Michael Göhler	38b9bffaea	call unsetMagicInCookie if token is invalid	13 years ago
Michael Göhler	eb79ccafe3	forgot a class name	13 years ago
Michael Göhler	2ea06f67bd	delete all tokens on password change	13 years ago
Michael Göhler	45f1c3f120	further improvements on multiple login token support ... outdated tokens are deleted before checking against cookies if an invalid token is used we delete all stored tokens for saveness used token will be replaced by a new one after successful authentication	13 years ago
Michael Göhler	ee5d0f328f	improve token security ... switched from time() to internal method OC_Util::generate_random_bytes()	13 years ago
Bart Visscher	4b799a6982	Make the lifetime of the remember login cookie	13 years ago
Bart Visscher	7f3e0b5566	Cleanup login tokens on login success	13 years ago
Bart Visscher	1012d317e3	Add support for multiple login cookie tokens	13 years ago
Michael Göhler	7095b3a083	extend logon page to display multiple error messages	13 years ago
Bart Visscher	9a35bd76fb	Use resolved path for require_once in autoloader	13 years ago
Bart Visscher	2c3674ea87	Add logging when stripping apps from autoload include path	13 years ago
Bart Visscher	fe40277ec2	Use __DIR__ instead of __FILE__ to get SERVERROOT	13 years ago
Lukas Reschke	cda2135966	Send a HSTS HTTP header to enforce SSL	13 years ago
Arthur Schiwon	3affeb5bd7	destroy invalid sessions	13 years ago
Bart Visscher	f3a211c03c	Implement routing on javascript side	13 years ago
Robin Appelman	f8eebcbb01	reload the current url when login in instead of always redirecting to the default app (oc-1873)	13 years ago
Lukas Reschke	578aa4e425	Removed sectoken ... This token is completly useless since an attacker can easily extract it from the page.	13 years ago
Christian Reiner	743826bbf3	Reimplementation of CSRF protection including autorefresh	13 years ago
VicDeo	2b6869bcea	Uncaught exception logging	13 years ago
Lukas Reschke	c4fc291fa7	Passwords containing a ":" don't work with this explode ... Thanks to mETz	13 years ago
Victor Dubiniuk	bbf8bb0bb3	Log PHP errors to the OC log	13 years ago
Michael Gapczynski	c5f9b887ff	Don't call clearCache() for OC_Minimizer statically, create OC_Minimizer objects for both CSS and JS to clear cache after upgrade	13 years ago
Robin Appelman	46422e6dbe	don't use regular expresions for a simple string replace	13 years ago
Bart Visscher	ceec5e593c	Remove redundant loadApps	13 years ago
Thomas Mueller	3829460ab8	adding space between) and {	13 years ago
Bart Visscher	5e55b4d6e7	Whitespace fixes in lib	13 years ago
Bart Visscher	9ea7817a40	Remove core.{css,js} cache on upgrade	13 years ago
Thomas Müller	9eccc0121a	Respect coding style	13 years ago
Thomas Müller	7901fc33a8	fixing syntax error	13 years ago
Thomas Müller	aff08925c1	fixing syntax error - sorry for that	13 years ago
Thomas Müller	2028500c0a	fixing syntax error - sorry for that	13 years ago
Thomas Müller	e4e0b5a822	Respect coding style	13 years ago
Robin Appelman	2508f64efe	set debug mode if an xdebug session is active	13 years ago
Robin Appelman	a7255181ad	fix autoloader throwing errors for non-oc classes	13 years ago
Robin Appelman	3dacf149de	allow configuring user backends in config.php	13 years ago
Robin Appelman	f67aef608f	load authentication apps on login	13 years ago
Robin Appelman	ebd813ae95	don't throw errors in the autoloader when a class doesn't exist	13 years ago