summaryrefslogtreecommitdiffstats
path: root/lib/base.php
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #1973 from ↵Morris Jobke2016-11-021-1/+11
|\ | | | | | | | | nextcloud/dont-disable-shipped-apps-but-throw-instead Throw an exception when a shipped app was not replaced before the update
| * Throw an exception when a shipped app was not replaced before the updateJoas Schilling2016-11-021-1/+11
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | bring back remember-meChristoph Wurst2016-11-021-0/+6
|/ | | | | | | | | | * try to reuse the old session token for remember me login * decrypt/encrypt token password and set the session id accordingly * create remember-me cookies only if checkbox is checked and 2fa solved * adjust db token cleanup to store remembered tokens longer * adjust unit tests Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Remove all unneeded set_include_path()Thomas Müller2016-10-251-6/+1
|
* Throw exception because the logger causes session issues anyway that early ↵Morris Jobke2016-10-241-1/+1
| | | | | | in the request cycle Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* log error when setting timezone to UTC fails (#26354)Jörn Friedrich Dreyer2016-10-241-1/+3
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Get rid of very old oc:// stream wrapper (#26381)Vincent Petry2016-10-201-1/+0
|
* Don't check for Same-Site cookie on Chrome AndroidLukas Reschke2016-09-201-0/+8
| | | | | | | | Chrome on Android has a bug that it doesn't sent cookies with the same-site attribute for the download manager. To work around that all same-site cookies get deleted and recreated directly. Awesome! FIXME: Remove once Chrome 54 is deployed to end-users @see https://github.com/nextcloud/server/pull/1454
* Add exemptions for incompatible UAsLukas Reschke2016-09-081-1/+15
| | | | | | | Some user agents are notorious and don't really properly follow HTTP specifications. For those, have an automated opt-out. Since the protection for remote.php is applied in base.php as starting point we need to opt out here.
* Allow to call status.php before the instance is installedJoas Schilling2016-09-061-1/+1
|
* Short circuit processing of the heartbeat requestRobin Appelman2016-08-301-0/+3
|
* Fix redirection taking care of protocol and portJuan Pablo Villafáñez2016-08-291-1/+1
|
* check registered sections and settings after an app got updated to garbage ↵Arthur Schiwon2016-08-161-0/+8
| | | | collect orphaned classes
* attempt to remove section and settings entries when an app got disabledArthur Schiwon2016-08-161-0/+9
|
* Merge pull request #660 from gdamjan/custom-config-dirMorris Jobke2016-08-091-1/+3
|\ | | | | introduce NEXTCLOUD_CONFIG_DIR env variable (see #300)
| * introduce NEXTCLOUD_CONFIG_DIR env variable (see #300)Damjan Georgievski2016-07-291-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nextcloud by default uses the `/config/` directory in the source/application tree for its config file(s). with this commit that directory can be overridden by the `NEXTCLOUD_CONFIG_DIR` environment variable. in uwsgi, you would use the option `--env "NEXTCLOUD_CONFIG_DIR=/tmp/nx-config/"` in apache `SetENV …` and the cli command can be run with: `NEXTCLOUD_CONFIG_DIR=/tmp/nx-config ./occ` (or just use `export` once in the shell). NEXTCLOUD_CONFIG_DIR can be supplied with or without the trailing slash (`/`), but in all cases `$configDir` will have it automatically added if needed. The other changes are several occurrences of `OC::$SERVERROOT . '/config'` to `OC::$configDir`.
* | reduce info on update screens, introduce button to refreshJan-Christoph Borchardt2016-08-041-2/+2
|/
* Update with robinJoas Schilling2016-07-211-1/+1
|
* Fix othersJoas Schilling2016-07-211-4/+6
|
* Merge pull request #479 from nextcloud/add-bruteforce-throttlerLukas Reschke2016-07-211-1/+1
|\ | | | | Implement brute force protection
| * Implement brute force protectionLukas Reschke2016-07-201-1/+1
| | | | | | | | | | | | | | | | | | Class Throttler implements the bruteforce protection for security actions in Nextcloud. It is working by logging invalid login attempts to the database and slowing down all login attempts from the same subnet. The max delay is 30 seconds and the starting delay are 200 milliseconds. (after the first failed login)
* | [master] Port Same-Site Cookies to masterLukas Reschke2016-07-201-0/+80
|/ | | | Fixes https://github.com/nextcloud/server/issues/50
* Merge pull request #400 from nextcloud/ocs_appframeworkRoeland Douma2016-07-191-1/+1
|\ | | | | OCS routes use AppFramework
| * Make the OCS endpoint handle the new OCS AppFramework routesRoeland Jago Douma2016-07-181-1/+1
| |
* | Use the themed Defaults everywhereJoas Schilling2016-07-151-1/+1
|/
* Revert "occ web executor (#24957)"Morris Jobke2016-07-071-16/+3
| | | | This reverts commit 854352d9a064a1e469ede207493bce44fd41d96c.
* Revert "Bypass upgrade page when occ controller is requested"Morris Jobke2016-07-071-15/+3
| | | | This reverts commit 89e581acf8d30e11a27f1d23560d54306615ae7e.
* Merge branch 'master' into sync-masterMorris Jobke2016-07-071-16/+18
|\
| * Changed name of default logfile from owncloud.log to nextcloud.log.Thomas Pulzer2016-07-041-2/+2
| |
| * Merge remote-tracking branch 'upstream/master' into master-upstream-syncLukas Reschke2016-06-261-3/+16
| |\
| * | some text-changes to nextcloudJoachim Sokolowski2016-06-221-13/+13
| | |
| * | Print error message again, when 3rdparty submodule is not initializedArthur Schiwon2016-06-081-1/+3
| | | | | | | | | | | | | | | - old code used Response which attempted to use OC::$server which is not and cannot be intialised at this part of the code.
* | | Bypass upgrade page when occ controller is requestedVictor Dubiniuk2016-07-051-3/+15
| |/ |/|
* | occ web executor (#24957)VicDeo2016-06-221-3/+16
|/ | | | | | | | | | | | * Initial web executor * Fix PHPDoc Fix broken integration test OccControllerTests do not require database access - moch them all! Kill unused sprintf
* Update license headersLukas Reschke2016-05-261-9/+5
|
* Fix class name in hook registrationJoas Schilling2016-05-241-1/+1
|
* Only allow loading of legacy (lib/private/legacy) by defaultRoeland Jago Douma2016-05-201-5/+1
|
* Move \OCP to PSR-4Roeland Jago Douma2016-05-191-1/+1
|
* Merge pull request #24597 from owncloud/run-upgrade-in-incognito-modeVincent Petry2016-05-171-0/+3
|\ | | | | run upgrades in incognito mode
| * run upgrades in incognito modeChristoph Wurst2016-05-121-0/+3
| |
* | Group fixup (#24621)Roeland Douma2016-05-171-1/+1
| | | | | | | | | | | | | | | | * Move used OC_Group_xx to \OC\Group * Add (deprecated) legacy wrapper in legacy, OC_Group_xx * Replace deprecated use of OC_Group_xx with \OC\Group\xx
* | Log user out correctly if max session lifetime is reached (#24552)Christoph Wurst2016-05-121-1/+1
|/
* try apache auth tooChristoph Wurst2016-05-111-4/+21
|
* token based authChristoph Wurst2016-05-111-170/+6
| | | | | | | | * Add InvalidTokenException * add DefaultTokenMapper and use it to check if a auth token exists * create new token for the browser session if none exists hash stored token; save user agent * encrypt login password when creating the token
* Move OC_User_Database to \OC\User\DatabaseRoeland Jago Douma2016-05-101-1/+1
|
* Keep the composer instance so we can add psr4 paths laterJoas Schilling2016-05-021-1/+4
|
* Merge pull request #24200 from owncloud/appframework_psr4Thomas Müller2016-04-221-3/+3
|\ | | | | Move \OC\AppFramework to PSR-4
| * Move \OC\AppFramework to PSR-4Roeland Jago Douma2016-04-221-3/+3
| | | | | | | | * Also moved the autoloader setup a bit up since we need it in initpaths
* | Disable web updater if ldap or shibboleth are installed - refs ↵Thomas Müller2016-04-221-4/+8
|/ | | | https://github.com/owncloud/core/issues/23913#issuecomment-213432232
* Merge pull request #24075 from owncloud/no-html-on-cliLukas Reschke2016-04-201-8/+3
|\ | | | | In case of fatal php errors and other unhandled exceptions no html er…