Commit Graph

272 Commits (b92fd984aa7f9281144b410ff703ca1796c10d41)

Author SHA1 Message Date
Michael Göhler b92fd984aa removed username and password from token generation 13 years ago
Michael Göhler a6c4046f48 fixed typo and redundant method call 13 years ago
Michael Göhler d8fe6fbb40 added a warning message to the log when a cookie is rejected 13 years ago
Michael Göhler 382f8d060c fixed wrong variable usage 13 years ago
Michael Göhler 38b9bffaea call unsetMagicInCookie if token is invalid 13 years ago
Michael Göhler eb79ccafe3 forgot a class name 13 years ago
Michael Göhler 2ea06f67bd delete all tokens on password change 13 years ago
Michael Göhler 45f1c3f120 further improvements on multiple login token support 13 years ago
Michael Göhler ee5d0f328f improve token security 13 years ago
Bart Visscher 4b799a6982 Make the lifetime of the remember login cookie 13 years ago
Bart Visscher 7f3e0b5566 Cleanup login tokens on login success 13 years ago
Bart Visscher 1012d317e3 Add support for multiple login cookie tokens 13 years ago
Bart Visscher 9a35bd76fb Use resolved path for require_once in autoloader 13 years ago
Bart Visscher 2c3674ea87 Add logging when stripping apps from autoload include path 13 years ago
Bart Visscher fe40277ec2 Use __DIR__ instead of __FILE__ to get SERVERROOT 13 years ago
Lukas Reschke cda2135966 Send a HSTS HTTP header to enforce SSL 13 years ago
Arthur Schiwon 3affeb5bd7 destroy invalid sessions 13 years ago
Robin Appelman f8eebcbb01 reload the current url when login in instead of always redirecting to the default app (oc-1873) 13 years ago
Lukas Reschke 578aa4e425 Removed sectoken 13 years ago
Christian Reiner 743826bbf3 Reimplementation of CSRF protection including autorefresh 13 years ago
Lukas Reschke c4fc291fa7 Passwords containing a ":" don't work with this explode 13 years ago
Michael Gapczynski c5f9b887ff Don't call clearCache() for OC_Minimizer statically, create OC_Minimizer objects for both CSS and JS to clear cache after upgrade 14 years ago
Robin Appelman 46422e6dbe don't use regular expresions for a simple string replace 14 years ago
Thomas Mueller 3829460ab8 adding space between) and { 14 years ago
Bart Visscher 5e55b4d6e7 Whitespace fixes in lib 14 years ago
Bart Visscher 9ea7817a40 Remove core.{css,js} cache on upgrade 14 years ago
Thomas Müller 9eccc0121a Respect coding style 14 years ago
Thomas Müller 7901fc33a8 fixing syntax error 14 years ago
Thomas Müller aff08925c1 fixing syntax error - sorry for that 14 years ago
Thomas Müller 2028500c0a fixing syntax error - sorry for that 14 years ago
Thomas Müller e4e0b5a822 Respect coding style 14 years ago
Robin Appelman 2508f64efe set debug mode if an xdebug session is active 14 years ago
Robin Appelman a7255181ad fix autoloader throwing errors for non-oc classes 14 years ago
Robin Appelman 3dacf149de allow configuring user backends in config.php 14 years ago
Robin Appelman f67aef608f load authentication apps on login 14 years ago
Robin Appelman ebd813ae95 don't throw errors in the autoloader when a class doesn't exist 14 years ago
Bart Visscher db18218a1b Space before tab fixes 14 years ago
Bart Visscher 52f2e7112e Whitespace fixes in lib 14 years ago
Bart Visscher 53e51fe46b Clean user cache on login 14 years ago
Bart Visscher 8a02a8852f Add background job for global file cache cleanup 14 years ago
Michael Gapczynski 12df81fe0b Check blacklist when renaming files 14 years ago
Lukas Reschke 0d8df3f55c Revert "Combine install checks in lib/base.php" 14 years ago
Michael Gapczynski 465767670b Check blacklist when renaming files 14 years ago
Lukas Reschke 8ec45870a3 Validate cookie properly and prevent auth bypass 14 years ago
Jakob Sack 0ea4fa298c Backgroundjobs: don't try to access OC_Appconfig if ownCloud has not been installed 14 years ago
Bart Visscher 82b10954e7 Simplify loading app php script files 14 years ago
Bart Visscher 5e7086adc9 Move login handling to OC class 14 years ago
Bart Visscher 83403784d1 Always load when the requested file is css 14 years ago
Bart Visscher da07245f59 Move OC::loadfile and OC::loadapp next to OC::handleRequest 14 years ago
Bart Visscher e3c732040b Make OC::loadfile and OC::loadapp protected, only used in OC::handleRequest 14 years ago