279 Commits (e67e5fed0af034014775caaab8178751da618ff9)

Author	SHA1	Message	Date
Robin Appelman	9d732e35e1	Check if user isset in $_REQUEST first	10 years ago
Lukas Reschke	b50987165e	Add support for read only config dir ... We already support the `config_is_read_only` for the config file itself. However not for the whole directory (which is a bug). This unifies the check in the checkServer routine with the one in base.php. Now one can enable a read only config folder so that ownCloud is not allowed to overwrite it's own source code. To test this set the whole config folder to read only, clear your session, refresh, see it fails, add the new code, refresh, see it works. Also verify that setup still works fine. (obviously setup does not work with a read only config Also verify that setup still works fine. (obviously setup does not work with a read only config)) Fixes https://github.com/owncloud/core/issues/14455	10 years ago
Lukas Reschke	70c228a7cc	Get rid of passing a reference ... Fixes https://github.com/owncloud/core/issues/14643	10 years ago
Joas Schilling	87bc02c6cd	Allow specifying a custom reset-password-url	10 years ago
Joas Schilling	f8f3c9ecf9	Remove password reset when the user can not change the password	10 years ago
Morris Jobke	4548a0aa90	Remove OC_Util::getUrlContent and replace by proper usage of public interfaces	10 years ago
Lukas Reschke	2515cb17be	Support pretty URLs ... This changeset allows ownCloud to run with pretty URLs, they will be used if mod_rewrite and mod_env are available. This means basically that the `index.php` in the URL is not shown to the user anymore. Also the not deprecated functions to generate URLs have been modified to support this behaviour, old functions such as `filePath` will still behave as before for compatibility reasons. Examples: http://localhost/owncloud/index.php/s/AIDyKbxiRZWAAjP => http://localhost/owncloud/s/AIDyKbxiRZWAAjP http://localhost/owncloud/index.php/apps/files/ => http://localhost/owncloud/apps/files/ Due to the way our CSS and JS is structured the .htaccess uses some hacks for the final result but could be worse... And I was just annoyed by all that users crying for the removal of `index.php` ;-)	10 years ago
Morris Jobke	675417a75c	Untangle the linkToDocs method in OC_Helper ... * now uses the proper URLGenerator interface * add comment about DI problems	10 years ago
Morris Jobke	728648ad77	Replace new occurences of ini_get with IniWrapper methods	10 years ago
Individual IT Services	1835462ec4	reuse code	10 years ago
Thomas Müller	c565a7b042	Fix failing unit test 💀	10 years ago
Thomas Müller	9ec2850c78	Use mocks when testing isSharingDisabledForUser	10 years ago
Robin Appelman	cc1db4ba87	assume pgsql >=9 if checking the version fails	10 years ago
Lukas Reschke	c6f6a8758b	Drop OC_SubAdmin and replace usages	10 years ago
Lukas Reschke	8f09d5b67c	Update license headers	10 years ago
Lukas Reschke	8133d46620	Remove dependency on ICrypto + use XOR	10 years ago
Morris Jobke	aa10825026	update deprecation message	10 years ago
Joas Schilling	e2806b0ae8	Update list of deprecated methods	10 years ago
Morris Jobke	b945d71384	update licence headers via script	10 years ago
Thomas Müller	b2dd5cb616	save excluded groups in json format - fixes #10983	10 years ago
Individual IT Services	db84791bb0	Todo for myself to eliminate double code ... This will be in a new PR	10 years ago
Individual IT Services	2e42f99d00	add $prepend option to addStyle() & addVendorStyle()	10 years ago
Individual IT Services	bf1cb20e90	do not load unnecessary code in case of webdav ... changing from "protected static" to "protected" as suggested by @nickvergessen https://github.com/owncloud/core/pull/19114#discussion_r39719851 moving initTemplate() into template constr. reduce to move initTemplate only cleanup spaces	10 years ago
Martin	491250320a	Replaces if ($file === '.' || $file === '..') by if(\OC\Files\Filesystem::isIgnoredDir($file)). Eases to find where this operation is used.	10 years ago
Lukas Reschke	a03422c55a	Cache generated result ... Saves 50ms	11 years ago
Bjoern Schiessle	37513f9411	don't read certificates if ownCloud is not installed	11 years ago
Vincent Petry	d5b0b55eef	Throw exception on downgrade attempt	11 years ago
Lukas Reschke	8313a3fcb3	Add mitigation against BREACH ... While BREACH requires the following three factors to be effectively exploitable we should add another mitigation: 1. Application must support HTTP compression 2. Response most reflect user-controlled input 3. Response should contain sensitive data Especially part 2 is with ownCloud not really given since user-input is usually only echoed if a CSRF token has been passed. To reduce the risk even further it is however sensible to encrypt the CSRF token with a shared secret. Since this will change on every request an attack such as BREACH is not feasible anymore against the CSRF token at least.	11 years ago
Arthur Schiwon	ffaf5fed0e	load backbone universally	11 years ago
Arthur Schiwon	67bb5712e4	make available as OC.Backbone to avoid conflicts	11 years ago
Thomas Müller	c3cac887f5	- more injection ... - less static calls - use params on sql queries - handle sql exception on database and user creation gracefully	11 years ago
Andreas Böhler	3a0d42ecf3	Add hook 'pre_displayLoginPage'	11 years ago
Andreas Böhler	3645308d0b	Add possibility for alternative logins to force redirection of login page	11 years ago
Robin McCorkell	df19cabb44	Store storage availability in database ... Storage status is saved in the database. Failed storages are rechecked every 10 minutes, while working storages are rechecked every request. Using the files_external app will recheck all external storages when the settings page is viewed, or whenever an external storage is saved.	11 years ago
Thomas Müller	1385b1ec48	Remove OC_Appconfig	11 years ago
Thomas Müller	d3ac73c0c9	Remove OC_Log	11 years ago
Morris Jobke	3e97ca3b96	Add getUserFolder to IRootFolder ... * untangle DI of user specific folders * allows to autodetect the dependency	11 years ago
Morris Jobke	f63915d0c8	update license headers and authors	11 years ago
Victor Dubiniuk	4239054383	Add type hint for OC_Channel	11 years ago
Christian Hoffmann	35207ae363	Clean-up of orthography, grammar ... * Changed "instead to" to "instead of". * Changed "setup" to "set up" (past participle).	11 years ago
Robin Appelman	077d41a9ce	wait with copying the skeleton untill login and setupfs are done	11 years ago
Roeland Jago Douma	9866066d3e	Depreatace OC_Util::getUrlContent ... It is just a wrapper and the other functions are deprecated already	11 years ago
Victor Dubiniuk	af814ba270	Allow change update channel via public API	11 years ago
Lukas Reschke	cbfdbf96d2	Mute XCache error when trying to clear the opcode cache ... From https://github.com/owncloud/core/issues/16287: > This is caused by XCache at 8e59d4c64b/lib/private/util.php (L1276) where we are trying to reset the opcode cache with `XC_TYPE_PHP`. > I suspect that while XCache is installed its opcode component is not used. Unfortunately, the XCache API is not really properly documented and thus I don't know what API we would have to call to check whether the `XC_TYPE_PHP` cache is populated. In fact, there is an [open XCache bug](http://xcache.lighttpd.net/ticket/176) since 7 years that discusses this problem and is likely to never get fixed since XCache is abandonware. Fixes https://github.com/owncloud/core/issues/16287	11 years ago
Lukas Reschke	11310355ed	Don't depend on always_populate_raw_post_data	11 years ago
Lukas Reschke	7c5558327d	Check `mbstring.func_overload` only if the mb module is installed. ... Fixes https://github.com/owncloud/core/issues/14670	11 years ago
Lukas Reschke	64393b4c03	Remove PHP 5.4 warning in checkSetup ... This is catched in index.php as older PHP versions will never execute the code path until there due to 5.4 syntax changes.	11 years ago
Lukas Reschke	4b9e034968	Remove hard-dependency on disabled output_buffering ... This removes the hard-dependency on output buffering as requested at https://github.com/owncloud/core/issues/16013 since a lot of distributions such as Debian and Ubuntu decided to use `4096` instead of the PHP recommended and documented default value of `off`. However, we still should encourage disabling this setting for improved performance and reliability thus the setting switches in `.user.ini` and `.htaccess` are remaining there. It is very likely that we in other cases also should disable the output buffering but aren't doing it everywhere and thus causing memory problems. Fixes https://github.com/owncloud/core/issues/16013	11 years ago
Lukas Reschke	0abce86b31	Disallow Windows Server in Server Check ... Will prevent users from use ownCloud on Windows Server 🙈	11 years ago
Thomas Müller	bf809ac85a	Removing left overs from old encryption app	11 years ago