765 Commits (adc986f3e4b83670f69e2ce48044595193be4e69)

Author	SHA1	Message	Date
Lukas Reschke	c1d7b22d08	Always load authentication apps ... The current code path may trigger situations where the LDAP application is not yet loaded and thus problems with the authentication appeared. In previous versions of ownCloud the authentication mechanism manually loaded these apps which is why this affects ownCloud 8 and master only for my knowledge. (certainly not 6, maybe 7) Backport to 8 might be something to consider. Fixes https://github.com/owncloud/core/issues/14469	10 years ago
Thomas Müller	0a9b8242ee	properly initialize OC::$WEBROOT and host name	10 years ago
Thomas Müller	bcd10d3dc5	implement command maintenance:install	10 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	10 years ago
Lukas Reschke	593681a4a9	Fix invalid `ini_set` directives ... Somehow they got messed up. Because PHP does automatic type juggling this has worked before as well however it's not guaranteed that this might work in the future as well.	10 years ago
Lukas Reschke	cd4c064ebf	Revert "add debug log for memcache instantiation"	10 years ago
Lukas Reschke	1a41f8f6f9	Check if instance is not yet installed ... Due to a security hardening in 8.1 a missing value of empty trusted domains in the config would provoke an error as this was misused by a lot of users. This caused a problem where the initial installation happened from another domain than 127.0.0.1 as in this case the domain was considered untrusted as no value was defined. However, this special case should not get intercepted. To test: - [ ] Installing ownCloud on 127.0.0.1 works - [ ] Installing ownCloud on another domain / IP works - [ ] When setting up ownCloud from 127.0.0.1 and accessing it from the domain above the trusted domain error should be shown if not specified in the config Fixes https://github.com/owncloud/core/issues/14320	10 years ago
Lukas Reschke	cebf9f6a5a	Incorporate review changes	10 years ago
Lukas Reschke	992164446c	Add blackmagic due to cyclic dependency 🙈	10 years ago
Lukas Reschke	886bda5f81	Refactor OC_Request into TrustedDomainHelper and IRequest ... This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed. This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions. Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though. Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969	10 years ago
Jörn Friedrich Dreyer	87db136508	add debug log for memcache instantiation	10 years ago
Lukas Reschke	a7df23ceba	Manually type-case all AJAX files ... This enforces proper types on POST and GET arguments where I considered it sensible. I didn't update some as I don't know what kind of values they would support 🙈 Fixes https://github.com/owncloud/core/issues/14196 for core	10 years ago
Morris Jobke	573aa196d4	Properly show the warning about the missing composer autoloader	10 years ago
Robin Appelman	8eda661761	Throw an exception when login is canceled by an app	10 years ago
Lukas Reschke	5f31207e84	Add some more sanity checks for maintenance mode	10 years ago
Lukas Reschke	1c75b73239	Verify authentication before initializing apps and routing ... The current behaviour of the authenticion logic in base.php prevents REST APIs in ownCloud applications to work. Because `!self::$CLI` is usually always a true statement the previously above block was entered which returned, thus the authentication logic for this part does not trigger in. This can be reproduced by installing apps such as the News app and issuing the following command: `curl -u admin:admin http://localhost/index.php/apps/news/api/v1-2/feeds` The following parts needs to get throughly tested: - [ ] OCS - [ ] remote.php's DAV features - [ ] Regular login features This bug affects master and stable7. I'd propose that we merge this for 8.0 since this has the potential to break every component that relies on Basic Auth features. A backport would also be very nice. Remark to myself: We really need to move out the authentication code for 8.1 out of base.php - I already have a local branch that does that somewhere which I will get in shape for 8.1... - This untested code is a night-mare. Fixes itself.	10 years ago
Jörn Friedrich Dreyer	606f802b7b	move search results below filelist, show hint when results are off screen, use js plugin mechanism	10 years ago
Jörn Friedrich Dreyer	088323aad5	move code from js.js to search.js in the search app	10 years ago
Lukas Reschke	058324b80e	Check basic auth header only for not-logged-in users	10 years ago
Lukas Reschke	b91a435ed4	Move basic auth login out of `isLoggedIn` ... Potentially fixes https://github.com/owncloud/core/issues/12915 and opens the door for potential other bugs... Please test very carefully, this includes: - Testing from OCS via cURL (as in #12915) - Testing from OCS via browser (Open the "Von Dir geteilt" shares overview) - WebDAV - CalDAV - CardDAV	10 years ago
Thomas Müller	51a22431ee	load showpassord.js conditionally in the template only if needed	10 years ago
Morris Jobke	9f30d3529a	Implement method that reads vendor libs from core.json ... * includes them at the beginning of initTemplate()	10 years ago
Morris Jobke	edcd2f2706	bower jquery-ui - exported changes to a separate css file	10 years ago
Lukas Reschke	9ea205dc3d	Check if open_basedir is set ... The file:// protocol does not work with curl when an open_basedir is set. This fixes https://github.com/owncloud/core/issues/12016	10 years ago
Morris Jobke	0d4f0ab871	reduce OC_Preferences, OC_Config and \OCP\Config usage ... * files_encryption * files_versions * files_trashbin * tests * status.php * core * server container	10 years ago
Morris Jobke	f164161f69	fix base.php for not installed systems	10 years ago
Lukas Reschke	bd520d2e53	Create config if it does not exists ... The codepath that is executed when executing ownCloud via CLI is different than via browser. Specifically, the config is created by the user session already in `OC_Util::getInstanceId()` by a call to `setValue`. That said, this seems to be quite a bad side-effect, but for the sake of "not breaking whatever might break if we touch this" let's keep it that way for now. When executing the autoconfig via `php -f index.php` the said session was not setup and thus no `config/config.php` file was created resulting in an installation error. To reproduce this try to setup ownCloud via `php -f index.php` with and without that patch. (ensure to delete all existing configs before and don't access ownCloud with a browser in the meantime) Fixes itself.	10 years ago
Lukas Reschke	ddcf2b84ec	Remove checks for safe mode and magic quotes ... Both are removed from 5.4.0 Safe Mode: http://php.net/manual/en/features.safe-mode.php > This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 5.4.0. Magic Quotes: http://php.net/manual/en/security.magicquotes.php > This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 5.4.0.	10 years ago
Lukas Reschke	e35feadac2	Pass \OC::$WEBROOT to the ctr	10 years ago
Thomas Müller	5097d4dc05	remove deprecated \OC:$session	10 years ago
Lukas Reschke	fc116f563f	Allow read-only configuration ... Workaround required for IIS setups running ownCloud to prevent dataloss. Long-term solution would be to move some configuration settings to the database	10 years ago
Morris Jobke	980dd4d22a	replace double quotes with single quotes	10 years ago
Morris Jobke	fef9d4218c	replace all static calls to OC_Config and OC_Preferences to calls to OCP\IConfig	10 years ago
Lukas Reschke	d0a30b0e55	Ignore port for trusted domains ... This lead to a lot of confusion in the past and did not really offer any value. Let's remove the port check therefore. (it's anyways not really a part of the domain) Fixes https://github.com/owncloud/core/issues/12150 and https://github.com/owncloud/core/issues/12123 and also a problem reported by @DeepDiver1975. Conflicts: lib/private/request.php	10 years ago
Lukas Reschke	8595b76df2	Remove phpass and migrate to new Hasher interface ... This PR removes phpass and migrates to the new Hasher interface. Please notice that due to https://github.com/owncloud/core/issues/10671 old hashes are not updated but the hashes are backwards compatible so this shouldn't hurt. Once the sharing classes have a possibility to update the passwords of single shares those methods should be used within the newHash if block.	10 years ago
Lukas Reschke	5b8a6b66b5	Load PHPAss via autoloader	10 years ago
Morris Jobke	73569b29bc	md5 now handled via bower	10 years ago
Morris Jobke	e49b9022a1	bower snapjs	10 years ago
Morris Jobke	957dee5af1	bower underscore	10 years ago
Morris Jobke	74d375d8ea	migrate jQuery to bower	10 years ago
Morris Jobke	1a405e56f5	replace moment.js with bower version ... * fix JS unit tests	10 years ago
Thomas Müller	994768d99f	Update Pimple to V3.0	10 years ago
Lukas Reschke	e73ccbd4ca	Migrate "setsecurity.php" to the AppFramework ... Add switch to enforce SSL for subdomains Add unit tests Add test for boolean values Camel-case Fix ugly JS	10 years ago
Thomas Müller	a4f0483f56	Update Symfony/Console to 2.5 & Update Symfony/Routing to 2.5	10 years ago
Lukas Reschke	d30fd23544	Clear session before setup ... Fixes https://github.com/owncloud/core/issues/11861	10 years ago
Vincent Petry	d71cd680dd	Include core translations ... Moved search result type translations to search.js Load JS translations earlier Translations need to be loaded earlier to make sure that some JS files like search.js get access to translations at this time. This requires the template initialization to be moved to after session initialization, because only after the session we have access to the current language.	10 years ago
Vincent Petry	ec1a73fab9	Added OC.L10N namespace with translation functions ... Added addTranslations and fixed de.js file Fixed de.js to use OC.L10N.register() and use to correct expected format. Added JS unit tests for OC.L10N class Include translations JS script for all apps	10 years ago
Thomas Müller	46c2909c78	Update doctrine/dbal to 2.5	10 years ago
Thomas Müller	c93ddf77b9	Use composer autoloader to load Patchwork	10 years ago
Adam Williamson	0e3f2055d2	use Composer autoloader not OC for non-Composer 3rdparty (#9643) ... Composer's autoloader is rather better than the OwnCloud autoloader's handling of non-OC classes. Plus we can rely on upstream Composer to maintain it and not worry about it ourselves. With this change, we drop the bits of OwnCloud's autoloader that handled non-OC classes, and register the classes that were being handled by that code with Composer's autoloader instead. As these dependencies are converted to actually being managed by Composer, the explicit registrations can be dropped as they won't be needed any more. Since OwnCloud's autoloader isn't going to handle non-OC classes any more, we no longer need to test to make sure it does it right. drop unneeded registerPrefix() and registerClass() from autoloader Now we're not handling anything but OC's own classes, these are unnecessary. error out if composer autoloader is not found (thanks bantu) We're never going to be able to work without the autoloader, if it's not there we should just throw our hands up and surrender.	10 years ago