779 Commits (cfe241a959d02fa856c0aca3cb7779b02cb3c943)

Author	SHA1	Message	Date
Bjoern Schiessle	ff9c85ce60	implement basic encryption functionallity in core to enable multiple encryption modules	10 years ago
Lukas Reschke	73af302d39	Remove custom `arg_separator.output` ... This seems unrequired nowadays and like a legacy fragment. It should be safe to remove. Fixes https://github.com/owncloud/core/issues/14782	10 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	10 years ago
Thomas Müller	843fef0490	Handle session initialization errors and display error page - fixes #15053	10 years ago
Joas Schilling	0bed187613	Stop executing, when 3rdparty is missing or apps directory is invalid	10 years ago
Thomas Müller	6c1a1234f8	Properly handle available databases at runtime and respect setup checks in command line as well	10 years ago
Thomas Müller	7181840665	Use occ to install ownCloud in autotest.sh	10 years ago
Robin McCorkell	0e4933e6d2	Refactor \OC\Memcache\Factory ... Caches divided up into two groups: distributed and local. 'Low latency' is an alias for local caches, while the standard `create()` call tries to get distributed caches first, then local caches. Memcache backend is set in `config.php`, with the keys `memcache.local` and `memcache.distributed`. If not set, `memcache.distributed` defaults to the value of `memcache.local`.	10 years ago
Lukas Reschke	bbd5f28415	Let users configure security headers in their Webserver ... Doing this in the PHP code is not the right approach for multiple reasons: 1. A bug in the PHP code prevents them from being added to the response. 2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud) 3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations. This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.	10 years ago
Lukas Reschke	afb0d742b9	Simplify code	10 years ago
Lukas Reschke	b6d8a48ce1	Add detection for invalid CLI configuration for settings page ... This change will log all failures that prevent the CLI cronjob from happening to the database and display a warning to administrators when an error happened. To test: 1. Configure some invalid CLI php.ini settings 2. Enable the CLI cronjob and run php cron.php 3. See the errors printed and also in the admin page 4. Configure the CLI settings correctly 5. Errors should be gone. Fixes https://github.com/owncloud/core/issues/13994	10 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" ... This reverts commit 6a1a4880f0.	10 years ago
Lukas Reschke	c1d7b22d08	Always load authentication apps ... The current code path may trigger situations where the LDAP application is not yet loaded and thus problems with the authentication appeared. In previous versions of ownCloud the authentication mechanism manually loaded these apps which is why this affects ownCloud 8 and master only for my knowledge. (certainly not 6, maybe 7) Backport to 8 might be something to consider. Fixes https://github.com/owncloud/core/issues/14469	10 years ago
Thomas Müller	0a9b8242ee	properly initialize OC::$WEBROOT and host name	10 years ago
Thomas Müller	bcd10d3dc5	implement command maintenance:install	10 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	10 years ago
Lukas Reschke	593681a4a9	Fix invalid `ini_set` directives ... Somehow they got messed up. Because PHP does automatic type juggling this has worked before as well however it's not guaranteed that this might work in the future as well.	10 years ago
Lukas Reschke	cd4c064ebf	Revert "add debug log for memcache instantiation"	10 years ago
Lukas Reschke	1a41f8f6f9	Check if instance is not yet installed ... Due to a security hardening in 8.1 a missing value of empty trusted domains in the config would provoke an error as this was misused by a lot of users. This caused a problem where the initial installation happened from another domain than 127.0.0.1 as in this case the domain was considered untrusted as no value was defined. However, this special case should not get intercepted. To test: - [ ] Installing ownCloud on 127.0.0.1 works - [ ] Installing ownCloud on another domain / IP works - [ ] When setting up ownCloud from 127.0.0.1 and accessing it from the domain above the trusted domain error should be shown if not specified in the config Fixes https://github.com/owncloud/core/issues/14320	10 years ago
Lukas Reschke	cebf9f6a5a	Incorporate review changes	10 years ago
Lukas Reschke	992164446c	Add blackmagic due to cyclic dependency 🙈	10 years ago
Lukas Reschke	886bda5f81	Refactor OC_Request into TrustedDomainHelper and IRequest ... This changeset removes the static class `OC_Request` and moves the functions either into `IRequest` which is accessible via `\OC::$server::->getRequest()` or into a separated `TrustedDomainHelper` class for some helper methods which should not be publicly exposed. This changes only internal methods and nothing on the public API. Some public functions in `util.php` have been deprecated though in favour of the new non-static functions. Unfortunately some part of this code uses things like `__DIR__` and thus is not completely unit-testable. Where tests where possible they ahve been added though. Fixes https://github.com/owncloud/core/issues/13976 which was requested in https://github.com/owncloud/core/pull/13973#issuecomment-73492969	10 years ago
Jörn Friedrich Dreyer	87db136508	add debug log for memcache instantiation	10 years ago
Lukas Reschke	a7df23ceba	Manually type-case all AJAX files ... This enforces proper types on POST and GET arguments where I considered it sensible. I didn't update some as I don't know what kind of values they would support 🙈 Fixes https://github.com/owncloud/core/issues/14196 for core	10 years ago
Morris Jobke	573aa196d4	Properly show the warning about the missing composer autoloader	10 years ago
Robin Appelman	8eda661761	Throw an exception when login is canceled by an app	10 years ago
Lukas Reschke	5f31207e84	Add some more sanity checks for maintenance mode	10 years ago
Lukas Reschke	1c75b73239	Verify authentication before initializing apps and routing ... The current behaviour of the authenticion logic in base.php prevents REST APIs in ownCloud applications to work. Because `!self::$CLI` is usually always a true statement the previously above block was entered which returned, thus the authentication logic for this part does not trigger in. This can be reproduced by installing apps such as the News app and issuing the following command: `curl -u admin:admin http://localhost/index.php/apps/news/api/v1-2/feeds` The following parts needs to get throughly tested: - [ ] OCS - [ ] remote.php's DAV features - [ ] Regular login features This bug affects master and stable7. I'd propose that we merge this for 8.0 since this has the potential to break every component that relies on Basic Auth features. A backport would also be very nice. Remark to myself: We really need to move out the authentication code for 8.1 out of base.php - I already have a local branch that does that somewhere which I will get in shape for 8.1... - This untested code is a night-mare. Fixes itself.	10 years ago
Jörn Friedrich Dreyer	606f802b7b	move search results below filelist, show hint when results are off screen, use js plugin mechanism	10 years ago
Jörn Friedrich Dreyer	088323aad5	move code from js.js to search.js in the search app	10 years ago
Lukas Reschke	058324b80e	Check basic auth header only for not-logged-in users	10 years ago
Lukas Reschke	b91a435ed4	Move basic auth login out of `isLoggedIn` ... Potentially fixes https://github.com/owncloud/core/issues/12915 and opens the door for potential other bugs... Please test very carefully, this includes: - Testing from OCS via cURL (as in #12915) - Testing from OCS via browser (Open the "Von Dir geteilt" shares overview) - WebDAV - CalDAV - CardDAV	10 years ago
Thomas Müller	51a22431ee	load showpassord.js conditionally in the template only if needed	10 years ago
Morris Jobke	9f30d3529a	Implement method that reads vendor libs from core.json ... * includes them at the beginning of initTemplate()	10 years ago
Morris Jobke	edcd2f2706	bower jquery-ui - exported changes to a separate css file	10 years ago
Lukas Reschke	9ea205dc3d	Check if open_basedir is set ... The file:// protocol does not work with curl when an open_basedir is set. This fixes https://github.com/owncloud/core/issues/12016	10 years ago
Morris Jobke	0d4f0ab871	reduce OC_Preferences, OC_Config and \OCP\Config usage ... * files_encryption * files_versions * files_trashbin * tests * status.php * core * server container	10 years ago
Morris Jobke	f164161f69	fix base.php for not installed systems	10 years ago
Lukas Reschke	bd520d2e53	Create config if it does not exists ... The codepath that is executed when executing ownCloud via CLI is different than via browser. Specifically, the config is created by the user session already in `OC_Util::getInstanceId()` by a call to `setValue`. That said, this seems to be quite a bad side-effect, but for the sake of "not breaking whatever might break if we touch this" let's keep it that way for now. When executing the autoconfig via `php -f index.php` the said session was not setup and thus no `config/config.php` file was created resulting in an installation error. To reproduce this try to setup ownCloud via `php -f index.php` with and without that patch. (ensure to delete all existing configs before and don't access ownCloud with a browser in the meantime) Fixes itself.	10 years ago
Lukas Reschke	ddcf2b84ec	Remove checks for safe mode and magic quotes ... Both are removed from 5.4.0 Safe Mode: http://php.net/manual/en/features.safe-mode.php > This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 5.4.0. Magic Quotes: http://php.net/manual/en/security.magicquotes.php > This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 5.4.0.	10 years ago
Lukas Reschke	e35feadac2	Pass \OC::$WEBROOT to the ctr	10 years ago
Thomas Müller	5097d4dc05	remove deprecated \OC:$session	10 years ago
Lukas Reschke	fc116f563f	Allow read-only configuration ... Workaround required for IIS setups running ownCloud to prevent dataloss. Long-term solution would be to move some configuration settings to the database	10 years ago
Morris Jobke	980dd4d22a	replace double quotes with single quotes	10 years ago
Morris Jobke	fef9d4218c	replace all static calls to OC_Config and OC_Preferences to calls to OCP\IConfig	10 years ago
Lukas Reschke	d0a30b0e55	Ignore port for trusted domains ... This lead to a lot of confusion in the past and did not really offer any value. Let's remove the port check therefore. (it's anyways not really a part of the domain) Fixes https://github.com/owncloud/core/issues/12150 and https://github.com/owncloud/core/issues/12123 and also a problem reported by @DeepDiver1975. Conflicts: lib/private/request.php	10 years ago
Lukas Reschke	8595b76df2	Remove phpass and migrate to new Hasher interface ... This PR removes phpass and migrates to the new Hasher interface. Please notice that due to https://github.com/owncloud/core/issues/10671 old hashes are not updated but the hashes are backwards compatible so this shouldn't hurt. Once the sharing classes have a possibility to update the passwords of single shares those methods should be used within the newHash if block.	10 years ago
Lukas Reschke	5b8a6b66b5	Load PHPAss via autoloader	11 years ago
Morris Jobke	73569b29bc	md5 now handled via bower	11 years ago
Morris Jobke	e49b9022a1	bower snapjs	11 years ago