b86f2069ff
Fix a session fixation vulnerability
...
- regenerate the session for every successful login
- properly destroy a session
Further information can be found on:
https://en.wikipedia.org/wiki/session_fixation
13 years ago
e039015ca1
prevent errors when a user backends gives an invalid result
13 years ago
b3a974d8bb
only trigger hooks for the default filesystem view
13 years ago
f1cbb9effc
initial integration of encryption
13 years ago
b6d66c4727
Remove the keys in preferences when a user is deleted - Thanks rogerc
13 years ago
534b6f3a09
Fix whitespace username
13 years ago
c7d4e72341
set cookie secure if forcessl is enabled
...
This also moves session_start in lib/base.php down a bit because we need
OC::$SERVERROOT to get the config settings.
Signed-off-by: Florian Pritz <bluewind@xinu.at>
14 years ago
94696ea7de
remember changed not to store password in cookie
14 years ago
68e7666293
Changed behaviour of remember checkbox
14 years ago
ee0954b236
fix issue with login being case insensitve
14 years ago
aa582ec43a
more work on encryption
14 years ago
1f1498ceca
remove Log completely
14 years ago
bafd684eb6
Renaming classes :-)
14 years ago
e69079f935
Further improvements
14 years ago
f5c0dbd947
Use autoload
14 years ago
c5776fdae4
remember login added
14 years ago
8b76590f5d
fix creating users
14 years ago
3b2fcd356f
Use new user backend API
14 years ago
83958ebd4b
add oc_user::getUser to get the user id of the loggedin user
14 years ago
ee0f1490e1
Multiply changes to user system
...
keeping tracked of the logged in user is no longer done by the active backend but by oc_user directly instead
multiply backends can be active at the same time, allowing alternative authentication procedures like openid or tokens to be used next to the regular user system
14 years ago
da30671ec4
More error checking in user management
14 years ago
f22c05deab
Check for existance of group- and usernames, don't mix OC_USER and OC_GROUP!
14 years ago
b37fb9142f
Added tons of Hooks to OC_USER and OC_GROUP
14 years ago
1fe5f5a2df
Better documentation for OC_USER
14 years ago
c4287162c4
Some work on the fancy user management
14 years ago
8465f76e7e
Use OC_CONFIG where possible
14 years ago
232654cb60
get rid of the oc_require and friends
14 years ago
149793f2e7
First version of the new user management
14 years ago
132695ceb1
Start of the refactoring. Commit is quite big because I forgot to use git right from the beginning. Sorry.
14 years ago
d294c2f6bd
Fix licencing, make headers refer to intended AGPL, include copy of AGPL
14 years ago
ba246b450f
Fixed typo (Lisener → Listener)
14 years ago
91acafe698
initial version for user managment tab in the settings page
15 years ago
a1fbbd09ee
add functions to get a list of all users or groups
15 years ago
f0f77aafbf
fix problem when creating users with a non-empty userid cache
15 years ago
5f53165efb
provide a function to load the data from a plugin.xml file
15 years ago
98e49c7552
use new plugin system for loading plugins
15 years ago
11664f3153
Moved LDAP authentication into a plugin
...
Used the current plugin system to define `USER_OC_LDAP` class
that can be used as backend for OC_USER
15 years ago
ccd362108e
Cleaned up and added some documentation
15 years ago
68775a282d
Created class `OC_USER_BACKEND` for general user managment
...
It's possible to use `OC_USER` as normal but the real stuff
is done by the `OC_USER::$_backend` class, setted using
`OC_USER::setBackend()` (this is done in inc/lib_user.php)
15 years ago
9fe46ef093
OC_USER now is an abstract class (OC_USER_ABSTRACT)
...
At start the choosen user manager is created
(e.g. OC_USER_DATABASE, OC_USER_LDAP)
and put into the global variable `$userManager`.
This is the variable to use instead of `OC_USER` class.
TODO: A better name than $userManager?
15 years ago
9c124a8dbf
Reverted to self::$classType syntax and fixed the use of self in non-object
15 years ago
64d4d57615
fix permissions, start to implement private data api
15 years ago
42d603c5b3
Minor style changes
...
* camelCase
* spaces here and there
15 years ago
7b84bf5f0e
Minor style changes
...
* Using camelCase for `$classType` property
* Using `self` keyword instead of class name
* Added spaces here and there
15 years ago
9ff483759f
Abstract lib_user
15 years ago
0939d5c393
Using camelCase for function names in 'inc/lib_user.php'
...
PHP function names is case-insensitive so this change isn't
intrusive but improve readability of the code.
15 years ago
11d515ef4e
Fix page not refreshing after login
15 years ago
d96793f14f
Fix some database problems, do not use the cache when creating users
15 years ago
76672fe037
Avoid creation of variables just to put the table names with prefix
15 years ago
54c1264e24
Using table prefix preference in 'inc/lib_user.php'
15 years ago
Florian Preinstorfer