450 Commits (75e9015b5445e957f2454373bed67dac1741b5cb)

Author	SHA1	Message	Date
Bart Visscher	8ce3aca331	Move loading of all the apps to setting the active navigation entry. ... We can't do the loading before matching the route, because some routes need to do the loading after matching of the route. For example the navigation detection of the app settings page.	12 years ago
Bart Visscher	8bed38c78d	Rename install hook functions to register hook	13 years ago
Bernhard Posselt	e642d18e26	When using routing in apps, no apps are loaded in the left navigation tree. To fix this: load apps for matching a request	13 years ago
Bart Visscher	530f3f8be9	Create functions to install standard hooks ... Also use these in tests that needs them Fix #151	13 years ago
Thomas Tanghus	7f0c69eb0e	Added CRUDS permissions to the OCP namespace. Implements issue #345	13 years ago
Stefan Seidel	8f669880bc	Fix WebDAV (and Android Client) not being able to authorize on Debian Squeeze + mod_fcgid installs.	13 years ago
Felix Moeller	a4b2ea586d	Style: Remove all the dangling white spaces	13 years ago
Felix Moeller	27ab0357ae	Checkstyle: Fix last six NewlineBeforeOpenBrace	13 years ago
Felix Moeller	30d7993e01	Checkstyle fixes: NoSpaceAfterComma	13 years ago
Lukas Reschke	d2e842fcc9	Remove uneeded new line	13 years ago
Lukas Reschke	822e4d5f6c	Check for redirect_url for logged in users ... This checks if there is a redirect_url for logged in users	13 years ago
Lukas Reschke	81f019b6c5	Make the redirect_url working again ... Fixes #160	13 years ago
Lukas Reschke	7a7f12a0c1	Create only one CSRF token per session ... Before, the CSRF token expired every hour. We had a script in place which should refresh the token but this don't worked in every case. (Laptop sleeping etc.) With this commit, the token will only get once created for every session so that the "Token expired" warning shouldn't appear.	13 years ago
Bart Visscher	6d09752940	DRY for creating htaccess to protect data-directory	13 years ago
Bart Visscher	246d7ea2ea	Separate control code from class definition	13 years ago
Lukas Reschke	f6b6780072	Don't use OC_Setup as it will show up the installer	13 years ago
Lukas Reschke	6903475841	Generate .htaccess when upgrading from old versions ... When upgrading from old ownCloud versions like 2.x the .htaccess is not generated - which exposes the data to the internet. This fix will generate a .htaccess when upgrading. (And no one exists) Fixes #127	13 years ago
Bart Visscher	fecfeac55d	Fix introduced style errors	13 years ago
Bart Visscher	43e8293d9c	Change Symfony/Component/Routing from submodule to composer fetching	13 years ago
Felix Moeller	6a00a6b9ed	Make Jenkins more happy. ... This is NoSpaceAfterComma	13 years ago
Sam Tuke	265f3654af	all unit files_encryption crypt unit tests now passing after merge	13 years ago
Susinthiran Sithamparanathan	b2b84f3a6f	Update Sabre to version 1.7.1	13 years ago
Lukas Reschke	de7b46c66a	Use `get_magic_quotes_gpc()` to determine if magic_quotes is enabled ... set_magic_quotes_runtime gives a PHP warning	13 years ago
Sam Tuke	8b01286a5d	Merged branch 'master'	13 years ago
Michael Göhler	8be9c04a3a	128byte is not 128bit - now we realy use 256bit (same as PHPSESSID)	13 years ago
Michael Göhler	ae1f33db54	implement fixed php session timeout and session id regeneration	13 years ago
Michael Göhler	b92fd984aa	removed username and password from token generation	13 years ago
Michael Göhler	a6c4046f48	fixed typo and redundant method call	13 years ago
Michael Göhler	d8fe6fbb40	added a warning message to the log when a cookie is rejected	13 years ago
Michael Göhler	382f8d060c	fixed wrong variable usage	13 years ago
Michael Göhler	38b9bffaea	call unsetMagicInCookie if token is invalid	13 years ago
Michael Göhler	eb79ccafe3	forgot a class name	13 years ago
Michael Göhler	2ea06f67bd	delete all tokens on password change	13 years ago
Michael Göhler	45f1c3f120	further improvements on multiple login token support ... outdated tokens are deleted before checking against cookies if an invalid token is used we delete all stored tokens for saveness used token will be replaced by a new one after successful authentication	13 years ago
Michael Göhler	ee5d0f328f	improve token security ... switched from time() to internal method OC_Util::generate_random_bytes()	13 years ago
Bart Visscher	4b799a6982	Make the lifetime of the remember login cookie	13 years ago
Bart Visscher	7f3e0b5566	Cleanup login tokens on login success	13 years ago
Bart Visscher	1012d317e3	Add support for multiple login cookie tokens	13 years ago
Michael Göhler	7095b3a083	extend logon page to display multiple error messages	13 years ago
Bart Visscher	44133a07d6	Add doctrine-common and doctrine-dbal	13 years ago
Bart Visscher	9a35bd76fb	Use resolved path for require_once in autoloader	13 years ago
Bart Visscher	2c3674ea87	Add logging when stripping apps from autoload include path	13 years ago
Bart Visscher	fe40277ec2	Use __DIR__ instead of __FILE__ to get SERVERROOT	13 years ago
Lukas Reschke	cda2135966	Send a HSTS HTTP header to enforce SSL	13 years ago
Arthur Schiwon	3affeb5bd7	destroy invalid sessions	13 years ago
Bart Visscher	f3a211c03c	Implement routing on javascript side	13 years ago
Robin Appelman	f8eebcbb01	reload the current url when login in instead of always redirecting to the default app (oc-1873)	13 years ago
Lukas Reschke	578aa4e425	Removed sectoken ... This token is completly useless since an attacker can easily extract it from the page.	13 years ago
Christian Reiner	743826bbf3	Reimplementation of CSRF protection including autorefresh	13 years ago
VicDeo	2b6869bcea	Uncaught exception logging	13 years ago