Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Make Jenkins more happy. | Felix Moeller | 2012-10-23 | 1 | -1/+1 |
| | | | | This is NoSpaceAfterComma | ||||
* | Use `get_magic_quotes_gpc()` to determine if magic_quotes is enabled | Lukas Reschke | 2012-10-16 | 1 | -1/+1 |
| | | | | set_magic_quotes_runtime gives a PHP warning | ||||
* | Merge pull request #31 from visit1985/persistentcookies | Lukas Reschke | 2012-10-16 | 1 | -10/+60 |
|\ | | | | | reresubmit: improved persistent cookies :) | ||||
| * | 128byte is not 128bit - now we realy use 256bit (same as PHPSESSID) | Michael Göhler | 2012-10-15 | 1 | -2/+2 |
| | | |||||
| * | implement fixed php session timeout and session id regeneration | Michael Göhler | 2012-10-14 | 1 | -0/+22 |
| | | |||||
| * | removed username and password from token generation | Michael Göhler | 2012-10-14 | 1 | -2/+2 |
| | | |||||
| * | fixed typo and redundant method call | Michael Göhler | 2012-10-14 | 1 | -2/+1 |
| | | |||||
| * | added a warning message to the log when a cookie is rejected | Michael Göhler | 2012-10-14 | 1 | -0/+1 |
| | | |||||
| * | fixed wrong variable usage | Michael Göhler | 2012-10-14 | 1 | -5/+5 |
| | | |||||
| * | call unsetMagicInCookie if token is invalid | Michael Göhler | 2012-10-14 | 1 | -2/+2 |
| | | |||||
| * | forgot a class name | Michael Göhler | 2012-10-14 | 1 | -2/+2 |
| | | |||||
| * | delete all tokens on password change | Michael Göhler | 2012-10-14 | 1 | -3/+5 |
| | | |||||
| * | further improvements on multiple login token support | Michael Göhler | 2012-10-14 | 1 | -3/+13 |
| | | | | | | | | | | | | outdated tokens are deleted before checking against cookies if an invalid token is used we delete all stored tokens for saveness used token will be replaced by a new one after successful authentication | ||||
| * | improve token security | Michael Göhler | 2012-10-14 | 1 | -1/+1 |
| | | | | | | | | switched from time() to internal method OC_Util::generate_random_bytes() | ||||
| * | Make the lifetime of the remember login cookie | Bart Visscher | 2012-10-14 | 1 | -1/+1 |
| | | |||||
| * | Cleanup login tokens on login success | Bart Visscher | 2012-10-14 | 1 | -0/+13 |
| | | |||||
| * | Add support for multiple login cookie tokens | Bart Visscher | 2012-10-14 | 1 | -9/+12 |
| | | |||||
* | | Merge branch 'extended_log' | Victor Dubiniuk | 2012-10-16 | 1 | -0/+4 |
|\ \ | | | | | | | | | | PHP errors logging into the owncloud log | ||||
| * | | Uncaught exception logging | VicDeo | 2012-09-26 | 1 | -2/+3 |
| | | | |||||
| * | | Log PHP errors to the OC log | Victor Dubiniuk | 2012-09-12 | 1 | -0/+3 |
| | | | |||||
* | | | extend logon page to display multiple error messages | Michael Göhler | 2012-10-14 | 1 | -5/+5 |
| |/ |/| | |||||
* | | Use resolved path for require_once in autoloader | Bart Visscher | 2012-10-12 | 1 | -1/+1 |
| | | |||||
* | | Add logging when stripping apps from autoload include path | Bart Visscher | 2012-10-10 | 1 | -2/+5 |
| | | |||||
* | | Use __DIR__ instead of __FILE__ to get SERVERROOT | Bart Visscher | 2012-10-10 | 1 | -1/+1 |
| | | |||||
* | | Send a HSTS HTTP header to enforce SSL | Lukas Reschke | 2012-10-10 | 1 | -0/+1 |
| | | |||||
* | | destroy invalid sessions | Arthur Schiwon | 2012-10-08 | 1 | -0/+4 |
| | | |||||
* | | reload the current url when login in instead of always redirecting to the ↵ | Robin Appelman | 2012-09-30 | 1 | -1/+2 |
| | | | | | | | | default app (oc-1873) | ||||
* | | Removed sectoken | Lukas Reschke | 2012-09-29 | 1 | -5/+1 |
| | | | | | | | | | | This token is completly useless since an attacker can easily extract it from the page. | ||||
* | | Reimplementation of CSRF protection including autorefresh | Christian Reiner | 2012-09-28 | 1 | -0/+2 |
| | | |||||
* | | Passwords containing a ":" don't work with this explode | Lukas Reschke | 2012-09-25 | 1 | -2/+2 |
|/ | | | | Thanks to mETz | ||||
* | Don't call clearCache() for OC_Minimizer statically, create OC_Minimizer ↵ | Michael Gapczynski | 2012-09-12 | 1 | -2/+4 |
| | | | | objects for both CSS and JS to clear cache after upgrade | ||||
* | don't use regular expresions for a simple string replace | Robin Appelman | 2012-09-08 | 1 | -1/+1 |
| | |||||
* | adding space between) and { | Thomas Mueller | 2012-09-07 | 1 | -4/+4 |
| | |||||
* | Whitespace fixes in lib | Bart Visscher | 2012-09-07 | 1 | -4/+4 |
| | |||||
* | Remove core.{css,js} cache on upgrade | Bart Visscher | 2012-09-07 | 1 | -0/+1 |
| | |||||
* | Respect coding style | Thomas Müller | 2012-09-05 | 1 | -6/+7 |
| | |||||
* | fixing syntax error | Thomas Müller | 2012-09-04 | 1 | -1/+1 |
| | |||||
* | fixing syntax error - sorry for that | Thomas Müller | 2012-09-04 | 1 | -1/+1 |
| | |||||
* | fixing syntax error - sorry for that | Thomas Müller | 2012-09-04 | 1 | -4/+4 |
| | |||||
* | Respect coding style | Thomas Müller | 2012-09-04 | 1 | -83/+82 |
| | |||||
* | set debug mode if an xdebug session is active | Robin Appelman | 2012-09-01 | 1 | -0/+7 |
| | |||||
* | fix autoloader throwing errors for non-oc classes | Robin Appelman | 2012-09-01 | 1 | -0/+2 |
| | |||||
* | allow configuring user backends in config.php | Robin Appelman | 2012-09-01 | 1 | -1/+10 |
| | |||||
* | load authentication apps on login | Robin Appelman | 2012-09-01 | 1 | -1/+1 |
| | |||||
* | don't throw errors in the autoloader when a class doesn't exist | Robin Appelman | 2012-09-01 | 1 | -5/+10 |
| | |||||
* | Space before tab fixes | Bart Visscher | 2012-08-29 | 1 | -1/+1 |
| | |||||
* | Whitespace fixes in lib | Bart Visscher | 2012-08-29 | 1 | -2/+2 |
| | |||||
* | Clean user cache on login | Bart Visscher | 2012-08-28 | 1 | -1/+2 |
| | |||||
* | Add background job for global file cache cleanup | Bart Visscher | 2012-08-28 | 1 | -0/+3 |
| | |||||
* | Revert "Combine install checks in lib/base.php" | Lukas Reschke | 2012-08-11 | 1 | -19/+19 |
| | | | | This reverts commit aa9fbf6639e2ce2fa2e8549d2d82d54a745d5327. |