994 Commits (2ed4bea18f207b6bb498cfa67e04652c3d5e69da)

Author	SHA1	Message	Date
Morris Jobke	6bf1fca6f0	Fix strict typing issues in lib/base.php ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	b19fae2629	Fix error log on PHP 7.2 ... Fixes following error in the logs: "ini_set(): A session is active. You cannot change the session module's ini settings at this time" Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	0e2f00ec59	Get the Installer via DI ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	5a270c2715	Reset bruteforce attempt table on successful login ... * only clear the entries that come from the same subnet, same action and same metadata Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	0eebff152a	Update license headers ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Roeland Jago Douma	e2139d4b56	Add logrote as a default background job ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	95cc831ed7	Remove SAML hack from base.php ... This is no longer required now that https://github.com/nextcloud/user_saml/pull/159 is in Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	c257cd57d4	Handle SameSiteCookie check for index.php in AppFramework Middleware ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Morris Jobke	0f83cdc78e	Use the guest.css for the maintenance page as well ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	b744639136	Reset opcache if update is detected ... This even works if opcache_reset is in the disabled_functions php.ini setting. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Joas Schilling	72c1b24844	Check whether the $_SERVER['REQUEST_*'] vars exist before using them ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Morris Jobke	3fa604cc5e	Allow to enforce update via web UI ... * adds a disclaimer that an update via web UI is on own risk * allows to skip the warning * fixes #4353 Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	abe4a19cbc	Properly decide on actual users if instance is too big ... * state the reason why NC thinks it is a big instance Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	9309217ecb	Fix escaped HTML on error pages ... * fixes #4655 Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Robin Appelman	d925856787	dont spam log when request can't access filesystem ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 years ago
Lukas Reschke	d4ba8198fe	Make the emergency disable also accept arrays ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Joas Schilling	f23a36b0a6	Add activities when email or password is changed ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Morris Jobke	5b4adf66e5	Move OC_Defaults to OCP\Defaults ... * currently there are two ways to access default values: OCP\Defaults or OC_Defaults (which is extended by OCA\Theming\ThemingDefaults) * our code used a mixture of both of them, which made it hard to work on theme values * this extended the public interface with the missing methods and uses them everywhere to only rely on the public interface Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	edd55b0ea9	Use SystemConfig instead of AllConfig for DB stuff ... * preparation for followup PRs to clean up the DB bootstrapping Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Ko-	0024b67aaf	Check that set_time_limit is not disabled before calling it ... Signed-off-by: Ko- <k.stoffelen@cs.ru.nl>	9 years ago
Morris Jobke	a5ba1f7803	Remove legacy class OC_Group and OC_User ... * basically a straight replacement of the wrapped code at the calling code parts Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Vincent Vanackere	be36513819	Extend Same Site cookie user_saml exemption rule ... The current check does not trigger if $request->getRequestUri() does not return index.php as a prefix (on my config this was occuring using nginx to serve Nextcloud) Signed-off-by: Vincent Vanackere <vincent.vanackere@trustelem.com>	9 years ago
Sebastian Wessalowski	e399097e3a	Remove deprecated OC_User::isLoggedIn ... Signed-off-by: Sebastian Wessalowski <sebastian@wessalowski.org>	9 years ago
Morris Jobke	9533f4e5ed	Clean up single user mode ... Single user mode basically disables WebDAV, OCS and cron execution. Since we heavily rely on WebDAV and OCS also in the web UI it's basically useless. An admin only sees a broken interface and can't even change any settings nor sees any files. Also sharing is not possible. As this is at least the case since Nextcloud 9 and we haven't received any reports for this it seems that this feature is not used at all so I removed it. The encryption commands now rely on the well tested maintenance mode. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
John Molakvoæ (skjnldsv)	2c9d7eeb76	Fix public page css fallback loading ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	9 years ago
John Molakvoæ (skjnldsv)	e4b3ba6590	Create unified css file and merge all needed data into this file ... Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>	9 years ago
Lukas Reschke	69f3430552	Allow access to CSS resources ... Fixes https://github.com/nextcloud/server/issues/2984 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Robin Appelman	54f96e5f58	Get the logfile location while running the logrotate cron job instead of when registering the job ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 years ago
Robin Appelman	5774d3e82c	replace close:// streamwrapper with CallBackWrapper ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 years ago
Morris Jobke	5e02c7f7bd	Theme update pages via CSS ... * SCSS on-the-fly generation isn't allowed during update * fallback to plain CSS Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Roeland Jago Douma	e723363053	Remove old preview code ... * \OC\Preview is no more * \Test\PreviewTests is no more * PreviewHooks in base.php are gone Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Robin Appelman	bca91f2216	remove static:// stream wrapper ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 years ago
Robin Appelman	968de70bc5	remove the need to register the quota streamwrapper globally ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 years ago
Robin Appelman	5b09565594	remove no longer used fakedir stream wrapper ... Signed-off-by: Robin Appelman <robin@icewind.nl>	9 years ago
Bjoern Schiessle	0de685c562	bring back setEmailAddress for the user management ... Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	9 years ago
Bjoern Schiessle	3fc75073b8	update accounts table if email address or display name changes from outside ... Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	9 years ago
Lukas Reschke	2144a114b0	Remove exception for Chrome on Mobile ... This didn't really work anyways and Chrome 54 for Android has been pushed out via Google Play on October 19th. So we should remove this. This is only in master and doesn't affect any stable branch. Fixes https://github.com/nextcloud/server/issues/2318 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	a05b8b7953	Harden cookies more appropriate ... This adds the __Host- prefix to the same-site cookies. This is a small but yet nice security hardening. See https://googlechrome.github.io/samples/cookie-prefixes/ for the implications. Fixes https://github.com/nextcloud/server/issues/1412 Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Joas Schilling	6a525fadbb	Show all in one message ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Jan-Christoph Borchardt	b228ed7bef	add explanatory text of what to do on app version error ... Signed-off-by: Jan-Christoph Borchardt <hey@jancborchardt.net>	9 years ago
Christoph Wurst	d907666232	bring back remember-me ... * try to reuse the old session token for remember me login * decrypt/encrypt token password and set the session id accordingly * create remember-me cookies only if checkbox is checked and 2fa solved * adjust db token cleanup to store remembered tokens longer * adjust unit tests Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	9 years ago
Joas Schilling	9b66e8f7d9	Throw an exception when a shipped app was not replaced before the update ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Thomas Müller	748f18f34e	Remove all unneeded set_include_path()	9 years ago
Morris Jobke	f920153f16	Throw exception because the logger causes session issues anyway that early in the request cycle ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Jörn Friedrich Dreyer	2e0e68b57f	log error when setting timezone to UTC fails (#26354) ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Vincent Petry	9e9fef46d9	Get rid of very old oc:// stream wrapper (#26381)	9 years ago
Lukas Reschke	9a2511fe9b	Don't check for Same-Site cookie on Chrome Android ... Chrome on Android has a bug that it doesn't sent cookies with the same-site attribute for the download manager. To work around that all same-site cookies get deleted and recreated directly. Awesome! FIXME: Remove once Chrome 54 is deployed to end-users @see https://github.com/nextcloud/server/pull/1454	9 years ago
Lukas Reschke	6ac890812f	Add exemptions for incompatible UAs ... Some user agents are notorious and don't really properly follow HTTP specifications. For those, have an automated opt-out. Since the protection for remote.php is applied in base.php as starting point we need to opt out here.	9 years ago
Joas Schilling	7bfc698ae4	Allow to call status.php before the instance is installed	9 years ago
Robin Appelman	acffaa55a1	Short circuit processing of the heartbeat request	9 years ago