215 Commits (cfe241a959d02fa856c0aca3cb7779b02cb3c943)

Author	SHA1	Message	Date
Jenkins for ownCloud	b585d87d9d	Update license headers	10 years ago
Joas Schilling	4c4c0fa120	Use the PreviewManager where possible	10 years ago
Lukas Reschke	c0a02f1615	Verify CSRF token already in update.php and not the EventSource code ... Issue report: > Hum, well I upgraded the package then visited the web interface to trigger the update and it failed; the UI would say there was a possible CSRF attack and after that it'd be stuck in maintenance mode. Tried a few times (by editing maintenance to false in owncloud.conf) and same result each time. That smells partially like an issue caused by our EventSource implementation, due to legacy concerns the CSRF verification happens within the EventSource handling and not when the actual endpoint is called, what happens here then is: 1. User has somehow an invalid CSRF token in session (or none at all) 2. User clicks the update button 3. Invalid CSRF token is sent to update.php - no CSRF check there => Instance gets set in maintenance mode 4. Invalid CSRF token is processed by the EventSource code => Code Execution is stopped and ownCloud is stuck in maintenance mode I have a work-around for this problem, basically it verifies the CSRF token already in step 3 and cancels execution then. The same error will be shown to the user however he can work around it by refreshing the page – as stated by the error. I think that’s an acceptable behaviour for now: INSERT LINK To verify this test: 1. Delete your ownCloud cookies 2. Increment the version in version.php 3. Try to upgrade => Before the patch: Instance shows an error, is set to upgrade mode and a refresh does not help => After the patch: Instance shows an error, a refresh helps though. This is not really the best fix as a better solution would be to catch such situations when bootstrapping ownCloud, however, I don’t dare to touch base.php for this sake only, you never know what breaks then… That said: There might be other bugs as well, especially the stacktrace is somewhat confusing but then again it installing ownCloud under /usr/share/owncloud/ and I bet that is part of the whole issue ;-)	10 years ago
Vincent Petry	22bc37cb82	Properly forward repair errors and warnings ... This makes repair errors and warnings visible for the user when upgrading on the command line or in the web UI.	10 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" ... This reverts commit 6a1a4880f0.	10 years ago
Thomas Müller	bbf7f56f94	3rd-party apps are disabled on upgrade - refs #14026	10 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	10 years ago
Lukas Reschke	a7df23ceba	Manually type-case all AJAX files ... This enforces proper types on POST and GET arguments where I considered it sensible. I didn't update some as I don't know what kind of values they would support 🙈 Fixes https://github.com/owncloud/core/issues/14196 for core	10 years ago
Morris Jobke	ce47065d8f	kill ancient code	10 years ago
Lukas Reschke	ceaaab6295	Verify whether type is correct ... `$this->info` can very well contain an empty array or possibly other values. This means that when this code path is called a PHP Fatal error might get thrown which is not what we want.	10 years ago
Bjoern Schiessle	e9e7ee67d3	shareType and permissions are integers	10 years ago
Jörn Friedrich Dreyer	d3662722f6	new OC.Search, add search result formatters and handlers, use full content width for results	10 years ago
Bjoern Schiessle	24993280ed	Next step in server-to-server sharing next generation, see #12285 ... Beside some small improvements and bug fixes this will probably the final state for OC8. To test this you need to set up two ownCloud instances. Let's say: URL: myPC/firstOwnCloud user: user1 URL: myPC/secondOwnCloud user: user2 Now user1 can share a file with user2 by entering the username and the URL to the second ownCloud to the share-drop-down, in this case "user2@myPC/secondOwnCloud". The next time user2 login he will get a notification that he received a server-to-server share with the option to accept/decline it. If he accept it the share will be mounted. In both cases a event will be send back to user1 and add a notification to the activity stream that the share was accepted/declined. If user1 decides to unshare the file again from user2 the share will automatically be removed from the second ownCloud server and user2 will see a notification in his activity stream that user1@myPC/firstOwnCloud has unshared the file/folder from him.	10 years ago
Victor Dubiniuk	c9fd3c9d29	Inject config	10 years ago
Victor Dubiniuk	303fce44f4	Use httphelper and cache response even when it empty	10 years ago
Thomas Müller	a589d61b78	in case a translation javascript is not found we no longer bail out ... remove translation.php	11 years ago
Thomas Müller	d9907b6fa3	move some deprecated usage of OC_Config and OC_AppConfig to \OC::server	11 years ago
Lukas Reschke	ba2472575f	Close the session for preview generation ... Without closing the session every preview image generation is locking the session which makes the webinterface unresponsive.	11 years ago
kondou	2a4c51389c	Use a route instead of s.php and convert tokens asap	11 years ago
kondou	0f2ad9862e	Initial work on shorter links	11 years ago
Robin Appelman	fa3393674c	Better phpdoc and method naming	11 years ago
Robin Appelman	65608d7c92	Use the public api to get event sources	11 years ago
Vincent Petry	e05b95636b	Fix upgrade process when apps enabled for specific groups ... Fix issue where the currently logged user was causing side-effects when upgrading. Now setting incognito mode (no user) on update to make sure the whole apps list is taken into account with getEnabledApps() or isEnabled().	11 years ago
Robin Appelman	d0266c0bf8	Use public api for getting l10n	11 years ago
Lukas Reschke	4aca46046b	Add require_once to update.php due to routing ... Fixes https://github.com/owncloud/core/issues/10585 Partially reverts 52d5429768	11 years ago
Lukas Reschke	ab12bd292d	Add update route to core	11 years ago
Bjoern Schiessle	d9f35d8c15	we need the recipient as a additional parameter to know for which share the notification was send	11 years ago
Robin Appelman	3184983565	Send feedback from upgrading apps to the upgrade ui	11 years ago
Thomas Müller	6d06a765f4	in case $_POST['itemSourceName'] does not exist we simply default it to null	11 years ago
Robin Appelman	4a9b0d5465	Use svg mimeicons for empty text files	11 years ago
Robin Appelman	c066320208	Also keep maxY into account when scaling a preview while preserving aspect ratio	11 years ago
Bjoern Schiessle	ecc1f92bb6	add OCS api call to set expire date for link shares	11 years ago
libasys	e6b093bfb9	Fix use Sharing Api with calendar ... Without this fix it logs this error: Undefined index: itemSourceName at /opt/local/apache2/htdocs/oc7/core/ajax/share.php#44 I think the itemSourceName is only used with sharing files!	11 years ago
Bjoern Schiessle	9c00f5ddb6	set minDate and maxDate in datepicker	11 years ago
Bjoern Schiessle	6578f00b4b	unify share settings	11 years ago
Vincent Petry	5b97369b00	Simulate apps database schema update on upgrade ... When upgrade, also simulate the database schema update for apps before doing the actual upgrade.	11 years ago
Vincent Petry	02f682b156	Now showing disabled apps as upgrade status line ... - Added app id in update overview. - Added status message for disabled app for CLI upgrade and web upgrade	11 years ago
Joas Schilling	ab7ae004f7	Automatically copy the share expiration date when new shares are created ... Fix #4823	11 years ago
Thomas Müller	20893cc3b3	Images on public sharing get downscaled to increase use experience - this will speed up loading time ... - adding keep aspect to core/ajax/preview.php - remove duplicate method Preview::show() - no more hard coded mimetype of preview - remove .png from the preview urls - keep old route preview.png for backwards compatibility - aspect preserving previews are now cached	11 years ago
Thomas Müller	f9279ac77a	killing some more calls to OC_App::loadApps(); - because we load all apps in handleRequest()	11 years ago
Thomas Tanghus	0b4d879619	Fix copy/paste error :P	11 years ago
Thomas Tanghus	aa5bba2bcc	'ID' => 'id' and check existence of EMAIL	11 years ago
Thomas Müller	6b9ae27b90	drop file cache migration OC5 -> OC6	11 years ago
Thomas Müller	f1ecc758f5	send an individual email to each recipient	11 years ago
Joas Schilling	80393d9c0f	Do not allow setting an expiration date in the past ... Fix #7297	11 years ago
Robin Appelman	7c4f81bd78	rename url parameter	11 years ago
Robin Appelman	4715fb12c8	Add url parameter to control whether previews should return 404 when the mimetype is unsupported	11 years ago
Bjoern Schiessle	2fd75d8f1c	clean up the sharing ajax calls, add mail notification class	11 years ago
Robin Appelman	609a91a9b1	Show svg mime icons when no preview is available	11 years ago
Lukas Reschke	c19cacb29f	Check whether the app is set	11 years ago