Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge pull request #1973 from ↵ | Morris Jobke | 2016-11-02 | 1 | -1/+11 |
|\ | | | | | | | | | nextcloud/dont-disable-shipped-apps-but-throw-instead Throw an exception when a shipped app was not replaced before the update | ||||
| * | Throw an exception when a shipped app was not replaced before the update | Joas Schilling | 2016-11-02 | 1 | -1/+11 |
| | | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com> | ||||
* | | bring back remember-me | Christoph Wurst | 2016-11-02 | 1 | -0/+6 |
|/ | | | | | | | | | | * try to reuse the old session token for remember me login * decrypt/encrypt token password and set the session id accordingly * create remember-me cookies only if checkbox is checked and 2fa solved * adjust db token cleanup to store remembered tokens longer * adjust unit tests Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at> | ||||
* | Remove all unneeded set_include_path() | Thomas Müller | 2016-10-25 | 1 | -6/+1 |
| | |||||
* | Throw exception because the logger causes session issues anyway that early ↵ | Morris Jobke | 2016-10-24 | 1 | -1/+1 |
| | | | | | | in the request cycle Signed-off-by: Morris Jobke <hey@morrisjobke.de> | ||||
* | log error when setting timezone to UTC fails (#26354) | Jörn Friedrich Dreyer | 2016-10-24 | 1 | -1/+3 |
| | | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> | ||||
* | Get rid of very old oc:// stream wrapper (#26381) | Vincent Petry | 2016-10-20 | 1 | -1/+0 |
| | |||||
* | Don't check for Same-Site cookie on Chrome Android | Lukas Reschke | 2016-09-20 | 1 | -0/+8 |
| | | | | | | | | Chrome on Android has a bug that it doesn't sent cookies with the same-site attribute for the download manager. To work around that all same-site cookies get deleted and recreated directly. Awesome! FIXME: Remove once Chrome 54 is deployed to end-users @see https://github.com/nextcloud/server/pull/1454 | ||||
* | Add exemptions for incompatible UAs | Lukas Reschke | 2016-09-08 | 1 | -1/+15 |
| | | | | | | | Some user agents are notorious and don't really properly follow HTTP specifications. For those, have an automated opt-out. Since the protection for remote.php is applied in base.php as starting point we need to opt out here. | ||||
* | Allow to call status.php before the instance is installed | Joas Schilling | 2016-09-06 | 1 | -1/+1 |
| | |||||
* | Short circuit processing of the heartbeat request | Robin Appelman | 2016-08-30 | 1 | -0/+3 |
| | |||||
* | Fix redirection taking care of protocol and port | Juan Pablo Villafáñez | 2016-08-29 | 1 | -1/+1 |
| | |||||
* | check registered sections and settings after an app got updated to garbage ↵ | Arthur Schiwon | 2016-08-16 | 1 | -0/+8 |
| | | | | collect orphaned classes | ||||
* | attempt to remove section and settings entries when an app got disabled | Arthur Schiwon | 2016-08-16 | 1 | -0/+9 |
| | |||||
* | Merge pull request #660 from gdamjan/custom-config-dir | Morris Jobke | 2016-08-09 | 1 | -1/+3 |
|\ | | | | | introduce NEXTCLOUD_CONFIG_DIR env variable (see #300) | ||||
| * | introduce NEXTCLOUD_CONFIG_DIR env variable (see #300) | Damjan Georgievski | 2016-07-29 | 1 | -1/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nextcloud by default uses the `/config/` directory in the source/application tree for its config file(s). with this commit that directory can be overridden by the `NEXTCLOUD_CONFIG_DIR` environment variable. in uwsgi, you would use the option `--env "NEXTCLOUD_CONFIG_DIR=/tmp/nx-config/"` in apache `SetENV …` and the cli command can be run with: `NEXTCLOUD_CONFIG_DIR=/tmp/nx-config ./occ` (or just use `export` once in the shell). NEXTCLOUD_CONFIG_DIR can be supplied with or without the trailing slash (`/`), but in all cases `$configDir` will have it automatically added if needed. The other changes are several occurrences of `OC::$SERVERROOT . '/config'` to `OC::$configDir`. | ||||
* | | reduce info on update screens, introduce button to refresh | Jan-Christoph Borchardt | 2016-08-04 | 1 | -2/+2 |
|/ | |||||
* | Update with robin | Joas Schilling | 2016-07-21 | 1 | -1/+1 |
| | |||||
* | Fix others | Joas Schilling | 2016-07-21 | 1 | -4/+6 |
| | |||||
* | Merge pull request #479 from nextcloud/add-bruteforce-throttler | Lukas Reschke | 2016-07-21 | 1 | -1/+1 |
|\ | | | | | Implement brute force protection | ||||
| * | Implement brute force protection | Lukas Reschke | 2016-07-20 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | Class Throttler implements the bruteforce protection for security actions in Nextcloud. It is working by logging invalid login attempts to the database and slowing down all login attempts from the same subnet. The max delay is 30 seconds and the starting delay are 200 milliseconds. (after the first failed login) | ||||
* | | [master] Port Same-Site Cookies to master | Lukas Reschke | 2016-07-20 | 1 | -0/+80 |
|/ | | | | Fixes https://github.com/nextcloud/server/issues/50 | ||||
* | Merge pull request #400 from nextcloud/ocs_appframework | Roeland Douma | 2016-07-19 | 1 | -1/+1 |
|\ | | | | | OCS routes use AppFramework | ||||
| * | Make the OCS endpoint handle the new OCS AppFramework routes | Roeland Jago Douma | 2016-07-18 | 1 | -1/+1 |
| | | |||||
* | | Use the themed Defaults everywhere | Joas Schilling | 2016-07-15 | 1 | -1/+1 |
|/ | |||||
* | Revert "occ web executor (#24957)" | Morris Jobke | 2016-07-07 | 1 | -16/+3 |
| | | | | This reverts commit 854352d9a064a1e469ede207493bce44fd41d96c. | ||||
* | Revert "Bypass upgrade page when occ controller is requested" | Morris Jobke | 2016-07-07 | 1 | -15/+3 |
| | | | | This reverts commit 89e581acf8d30e11a27f1d23560d54306615ae7e. | ||||
* | Merge branch 'master' into sync-master | Morris Jobke | 2016-07-07 | 1 | -16/+18 |
|\ | |||||
| * | Changed name of default logfile from owncloud.log to nextcloud.log. | Thomas Pulzer | 2016-07-04 | 1 | -2/+2 |
| | | |||||
| * | Merge remote-tracking branch 'upstream/master' into master-upstream-sync | Lukas Reschke | 2016-06-26 | 1 | -3/+16 |
| |\ | |||||
| * | | some text-changes to nextcloud | Joachim Sokolowski | 2016-06-22 | 1 | -13/+13 |
| | | | |||||
| * | | Print error message again, when 3rdparty submodule is not initialized | Arthur Schiwon | 2016-06-08 | 1 | -1/+3 |
| | | | | | | | | | | | | | | | - old code used Response which attempted to use OC::$server which is not and cannot be intialised at this part of the code. | ||||
* | | | Bypass upgrade page when occ controller is requested | Victor Dubiniuk | 2016-07-05 | 1 | -3/+15 |
| |/ |/| | |||||
* | | occ web executor (#24957) | VicDeo | 2016-06-22 | 1 | -3/+16 |
|/ | | | | | | | | | | | | * Initial web executor * Fix PHPDoc Fix broken integration test OccControllerTests do not require database access - moch them all! Kill unused sprintf | ||||
* | Update license headers | Lukas Reschke | 2016-05-26 | 1 | -9/+5 |
| | |||||
* | Fix class name in hook registration | Joas Schilling | 2016-05-24 | 1 | -1/+1 |
| | |||||
* | Only allow loading of legacy (lib/private/legacy) by default | Roeland Jago Douma | 2016-05-20 | 1 | -5/+1 |
| | |||||
* | Move \OCP to PSR-4 | Roeland Jago Douma | 2016-05-19 | 1 | -1/+1 |
| | |||||
* | Merge pull request #24597 from owncloud/run-upgrade-in-incognito-mode | Vincent Petry | 2016-05-17 | 1 | -0/+3 |
|\ | | | | | run upgrades in incognito mode | ||||
| * | run upgrades in incognito mode | Christoph Wurst | 2016-05-12 | 1 | -0/+3 |
| | | |||||
* | | Group fixup (#24621) | Roeland Douma | 2016-05-17 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | * Move used OC_Group_xx to \OC\Group * Add (deprecated) legacy wrapper in legacy, OC_Group_xx * Replace deprecated use of OC_Group_xx with \OC\Group\xx | ||||
* | | Log user out correctly if max session lifetime is reached (#24552) | Christoph Wurst | 2016-05-12 | 1 | -1/+1 |
|/ | |||||
* | try apache auth too | Christoph Wurst | 2016-05-11 | 1 | -4/+21 |
| | |||||
* | token based auth | Christoph Wurst | 2016-05-11 | 1 | -170/+6 |
| | | | | | | | | * Add InvalidTokenException * add DefaultTokenMapper and use it to check if a auth token exists * create new token for the browser session if none exists hash stored token; save user agent * encrypt login password when creating the token | ||||
* | Move OC_User_Database to \OC\User\Database | Roeland Jago Douma | 2016-05-10 | 1 | -1/+1 |
| | |||||
* | Keep the composer instance so we can add psr4 paths later | Joas Schilling | 2016-05-02 | 1 | -1/+4 |
| | |||||
* | Merge pull request #24200 from owncloud/appframework_psr4 | Thomas Müller | 2016-04-22 | 1 | -3/+3 |
|\ | | | | | Move \OC\AppFramework to PSR-4 | ||||
| * | Move \OC\AppFramework to PSR-4 | Roeland Jago Douma | 2016-04-22 | 1 | -3/+3 |
| | | | | | | | | * Also moved the autoloader setup a bit up since we need it in initpaths | ||||
* | | Disable web updater if ldap or shibboleth are installed - refs ↵ | Thomas Müller | 2016-04-22 | 1 | -4/+8 |
|/ | | | | https://github.com/owncloud/core/issues/23913#issuecomment-213432232 | ||||
* | Merge pull request #24075 from owncloud/no-html-on-cli | Lukas Reschke | 2016-04-20 | 1 | -8/+3 |
|\ | | | | | In case of fatal php errors and other unhandled exceptions no html er… |