438 Commits (bf7514f76abef4bcbb533e4c6c33e00a4e1fdfb5)

Author	SHA1	Message	Date
Lukas Reschke	81f019b6c5	Make the redirect_url working again ... Fixes #160	14 years ago
Lukas Reschke	7a7f12a0c1	Create only one CSRF token per session ... Before, the CSRF token expired every hour. We had a script in place which should refresh the token but this don't worked in every case. (Laptop sleeping etc.) With this commit, the token will only get once created for every session so that the "Token expired" warning shouldn't appear.	14 years ago
Bart Visscher	6d09752940	DRY for creating htaccess to protect data-directory	14 years ago
Bart Visscher	246d7ea2ea	Separate control code from class definition	14 years ago
Lukas Reschke	f6b6780072	Don't use OC_Setup as it will show up the installer	14 years ago
Lukas Reschke	6903475841	Generate .htaccess when upgrading from old versions ... When upgrading from old ownCloud versions like 2.x the .htaccess is not generated - which exposes the data to the internet. This fix will generate a .htaccess when upgrading. (And no one exists) Fixes #127	14 years ago
Bart Visscher	fecfeac55d	Fix introduced style errors	14 years ago
Bart Visscher	43e8293d9c	Change Symfony/Component/Routing from submodule to composer fetching	14 years ago
Felix Moeller	6a00a6b9ed	Make Jenkins more happy. ... This is NoSpaceAfterComma	14 years ago
Sam Tuke	265f3654af	all unit files_encryption crypt unit tests now passing after merge	14 years ago
Susinthiran Sithamparanathan	b2b84f3a6f	Update Sabre to version 1.7.1	14 years ago
Lukas Reschke	de7b46c66a	Use `get_magic_quotes_gpc()` to determine if magic_quotes is enabled ... set_magic_quotes_runtime gives a PHP warning	14 years ago
Sam Tuke	8b01286a5d	Merged branch 'master'	14 years ago
Michael Göhler	8be9c04a3a	128byte is not 128bit - now we realy use 256bit (same as PHPSESSID)	14 years ago
Michael Göhler	ae1f33db54	implement fixed php session timeout and session id regeneration	14 years ago
Michael Göhler	b92fd984aa	removed username and password from token generation	14 years ago
Michael Göhler	a6c4046f48	fixed typo and redundant method call	14 years ago
Michael Göhler	d8fe6fbb40	added a warning message to the log when a cookie is rejected	14 years ago
Michael Göhler	382f8d060c	fixed wrong variable usage	14 years ago
Michael Göhler	38b9bffaea	call unsetMagicInCookie if token is invalid	14 years ago
Michael Göhler	eb79ccafe3	forgot a class name	14 years ago
Michael Göhler	2ea06f67bd	delete all tokens on password change	14 years ago
Michael Göhler	45f1c3f120	further improvements on multiple login token support ... outdated tokens are deleted before checking against cookies if an invalid token is used we delete all stored tokens for saveness used token will be replaced by a new one after successful authentication	14 years ago
Michael Göhler	ee5d0f328f	improve token security ... switched from time() to internal method OC_Util::generate_random_bytes()	14 years ago
Bart Visscher	4b799a6982	Make the lifetime of the remember login cookie	14 years ago
Bart Visscher	7f3e0b5566	Cleanup login tokens on login success	14 years ago
Bart Visscher	1012d317e3	Add support for multiple login cookie tokens	14 years ago
Michael Göhler	7095b3a083	extend logon page to display multiple error messages	14 years ago
Bart Visscher	9a35bd76fb	Use resolved path for require_once in autoloader	14 years ago
Bart Visscher	2c3674ea87	Add logging when stripping apps from autoload include path	14 years ago
Bart Visscher	fe40277ec2	Use __DIR__ instead of __FILE__ to get SERVERROOT	14 years ago
Lukas Reschke	cda2135966	Send a HSTS HTTP header to enforce SSL	14 years ago
Arthur Schiwon	3affeb5bd7	destroy invalid sessions	14 years ago
Bart Visscher	f3a211c03c	Implement routing on javascript side	14 years ago
Robin Appelman	f8eebcbb01	reload the current url when login in instead of always redirecting to the default app (oc-1873)	14 years ago
Lukas Reschke	578aa4e425	Removed sectoken ... This token is completly useless since an attacker can easily extract it from the page.	14 years ago
Christian Reiner	743826bbf3	Reimplementation of CSRF protection including autorefresh	14 years ago
VicDeo	2b6869bcea	Uncaught exception logging	14 years ago
Lukas Reschke	c4fc291fa7	Passwords containing a ":" don't work with this explode ... Thanks to mETz	14 years ago
Robin Appelman	b206d16b10	add support for loading namespaced test cases	14 years ago
Tom Needham	b261c980c7	Fix autoloader merge conflict	14 years ago
Tom Needham	182f890110	Remove a merge conflict	14 years ago
Victor Dubiniuk	bbf8bb0bb3	Log PHP errors to the OC log	14 years ago
Michael Gapczynski	c5f9b887ff	Don't call clearCache() for OC_Minimizer statically, create OC_Minimizer objects for both CSS and JS to clear cache after upgrade	14 years ago
Robin Appelman	46422e6dbe	don't use regular expresions for a simple string replace	14 years ago
Robin Appelman	bd83422095	put filestorages in a namespace	14 years ago
Bart Visscher	ceec5e593c	Remove redundant loadApps	14 years ago
Thomas Mueller	3829460ab8	adding space between) and {	14 years ago
Bart Visscher	5e55b4d6e7	Whitespace fixes in lib	14 years ago
Bart Visscher	9ea7817a40	Remove core.{css,js} cache on upgrade	14 years ago