317 Commits (fb5d0db0376f8f75fe6745fd1c94d5b325be4f41)

Author	SHA1	Message	Date
Bernhard Posselt	e642d18e26	When using routing in apps, no apps are loaded in the left navigation tree. To fix this: load apps for matching a request	13 years ago
Thomas Tanghus	7f0c69eb0e	Added CRUDS permissions to the OCP namespace. Implements issue #345	13 years ago
Stefan Seidel	8f669880bc	Fix WebDAV (and Android Client) not being able to authorize on Debian Squeeze + mod_fcgid installs.	13 years ago
Felix Moeller	a4b2ea586d	Style: Remove all the dangling white spaces	13 years ago
Felix Moeller	27ab0357ae	Checkstyle: Fix last six NewlineBeforeOpenBrace	13 years ago
Felix Moeller	30d7993e01	Checkstyle fixes: NoSpaceAfterComma	13 years ago
Lukas Reschke	7a7f12a0c1	Create only one CSRF token per session ... Before, the CSRF token expired every hour. We had a script in place which should refresh the token but this don't worked in every case. (Laptop sleeping etc.) With this commit, the token will only get once created for every session so that the "Token expired" warning shouldn't appear.	13 years ago
Bart Visscher	6d09752940	DRY for creating htaccess to protect data-directory	13 years ago
Bart Visscher	246d7ea2ea	Separate control code from class definition	13 years ago
Lukas Reschke	f6b6780072	Don't use OC_Setup as it will show up the installer	13 years ago
Lukas Reschke	6903475841	Generate .htaccess when upgrading from old versions ... When upgrading from old ownCloud versions like 2.x the .htaccess is not generated - which exposes the data to the internet. This fix will generate a .htaccess when upgrading. (And no one exists) Fixes #127	13 years ago
Bart Visscher	fecfeac55d	Fix introduced style errors	13 years ago
Bart Visscher	43e8293d9c	Change Symfony/Component/Routing from submodule to composer fetching	13 years ago
Felix Moeller	6a00a6b9ed	Make Jenkins more happy. ... This is NoSpaceAfterComma	13 years ago
Susinthiran Sithamparanathan	b2b84f3a6f	Update Sabre to version 1.7.1	13 years ago
Lukas Reschke	de7b46c66a	Use `get_magic_quotes_gpc()` to determine if magic_quotes is enabled ... set_magic_quotes_runtime gives a PHP warning	13 years ago
Michael Göhler	8be9c04a3a	128byte is not 128bit - now we realy use 256bit (same as PHPSESSID)	13 years ago
Michael Göhler	ae1f33db54	implement fixed php session timeout and session id regeneration	13 years ago
Michael Göhler	b92fd984aa	removed username and password from token generation	13 years ago
Michael Göhler	a6c4046f48	fixed typo and redundant method call	13 years ago
Michael Göhler	d8fe6fbb40	added a warning message to the log when a cookie is rejected	13 years ago
Michael Göhler	382f8d060c	fixed wrong variable usage	13 years ago
Michael Göhler	38b9bffaea	call unsetMagicInCookie if token is invalid	13 years ago
Michael Göhler	eb79ccafe3	forgot a class name	13 years ago
Michael Göhler	2ea06f67bd	delete all tokens on password change	13 years ago
Michael Göhler	45f1c3f120	further improvements on multiple login token support ... outdated tokens are deleted before checking against cookies if an invalid token is used we delete all stored tokens for saveness used token will be replaced by a new one after successful authentication	13 years ago
Michael Göhler	ee5d0f328f	improve token security ... switched from time() to internal method OC_Util::generate_random_bytes()	13 years ago
Bart Visscher	4b799a6982	Make the lifetime of the remember login cookie	13 years ago
Bart Visscher	7f3e0b5566	Cleanup login tokens on login success	13 years ago
Bart Visscher	1012d317e3	Add support for multiple login cookie tokens	13 years ago
Michael Göhler	7095b3a083	extend logon page to display multiple error messages	13 years ago
Bart Visscher	9a35bd76fb	Use resolved path for require_once in autoloader	13 years ago
Bart Visscher	2c3674ea87	Add logging when stripping apps from autoload include path	13 years ago
Bart Visscher	fe40277ec2	Use __DIR__ instead of __FILE__ to get SERVERROOT	13 years ago
Lukas Reschke	cda2135966	Send a HSTS HTTP header to enforce SSL	13 years ago
Arthur Schiwon	3affeb5bd7	destroy invalid sessions	13 years ago
Bart Visscher	f3a211c03c	Implement routing on javascript side	13 years ago
Robin Appelman	f8eebcbb01	reload the current url when login in instead of always redirecting to the default app (oc-1873)	13 years ago
Lukas Reschke	578aa4e425	Removed sectoken ... This token is completly useless since an attacker can easily extract it from the page.	13 years ago
Christian Reiner	743826bbf3	Reimplementation of CSRF protection including autorefresh	13 years ago
VicDeo	2b6869bcea	Uncaught exception logging	13 years ago
Lukas Reschke	c4fc291fa7	Passwords containing a ":" don't work with this explode ... Thanks to mETz	13 years ago
Victor Dubiniuk	bbf8bb0bb3	Log PHP errors to the OC log	13 years ago
Michael Gapczynski	c5f9b887ff	Don't call clearCache() for OC_Minimizer statically, create OC_Minimizer objects for both CSS and JS to clear cache after upgrade	13 years ago
Robin Appelman	46422e6dbe	don't use regular expresions for a simple string replace	13 years ago
Bart Visscher	ceec5e593c	Remove redundant loadApps	13 years ago
Thomas Mueller	3829460ab8	adding space between) and {	13 years ago
Bart Visscher	5e55b4d6e7	Whitespace fixes in lib	13 years ago
Bart Visscher	9ea7817a40	Remove core.{css,js} cache on upgrade	13 years ago
Thomas Müller	9eccc0121a	Respect coding style	13 years ago