summaryrefslogtreecommitdiffstats
path: root/lib/base.php
Commit message (Collapse)AuthorAgeFilesLines
* Revert "Use APCu caching of composer"Joas Schilling2018-09-191-2/+0
| | | | | | This reverts commit 948ab8a4d06b3821ab94c11a3a04c820e60d6c8a. For details why see https://github.com/nextcloud/server/issues/11290
* replace setcookie value with '' instead of null.MartB2018-09-061-1/+1
| | | | | | | The php documentation states that an empty string should be used for a cookie when it has no real value. null leads to the following error: expects parameter 2 to be string, null given Signed-off-by: Martin Böh <mart.b@outlook.de>
* Fix remnants of refactoringMorris Jobke2018-07-051-2/+2
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Do not use HTTP code OC_Response constants anymoreMorris Jobke2018-06-261-1/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Replace hardcoded status headers with calls to http_response_code()Morris Jobke2018-06-261-15/+8
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Server exception error pages by default with a 500 status codeMorris Jobke2018-06-261-2/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Server error/hint pages with a 500 error code to avoid it being seen instead ↵Morris Jobke2018-06-261-4/+4
| | | | | | | | | of the actual resource * found while reviewing #7205 * allow to specify a special status code Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Change status code when config is write protectedEric Masseran2018-06-261-2/+6
| | | | | | | | | | Add hint msg, you can make config file read only If the config.php is not writable, print an error message: #6893 - set config writable - or set option to keep it read only Signed-off-by: Eric Masseran <rico.masseran@gmail.com>
* Configurable list for opt out from same site cookie protectionjaltek2018-06-061-5/+12
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Use APCu caching of composerRoeland Jago Douma2018-05-101-0/+2
| | | | | | | Should potentially shave of a few ms when loading classes of apps that don't ship their own autoloader. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* move log constants to ILoggerArthur Schiwon2018-04-261-1/+2
| | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Show a link to the docs instead of a button on the untrusted domain pageMorris Jobke2018-04-171-2/+2
| | | | | | | | Before there was a button to "quickly" add the untrusted domain to the config. This button often didn't worked, because the generated URL was often untrusted as well. Thus removing it and providing proper docs seems to be the better approach to handle this rare case. Also the log should not be spammed by messages for the untrusted domain accesses, because they are user related and not necessarily an administrative issue. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Allow usage of Windows 10 WebDav NetdriveRoeland Jago Douma2018-04-051-0/+1
| | | | | | | | | Fixes #3523 As long as we don't have #8123 lets not leave our Window10 netdrive users hanging. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Move calls to \OCP\JSON to private \OC_JSONRoeland Jago Douma2018-03-221-2/+2
| | | | | | They should be properly fixed at some point. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Use proper method to log exceptionsMorris Jobke2018-03-121-1/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Remove OC_App::disable methodTobia De Koninck2018-03-061-1/+1
| | | | Signed-off-by: Tobia De Koninck <tobia@ledfan.be>
* getIncompatibleApps needs a string not an arrayRoeland Jago Douma2018-02-211-0/+1
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Merge pull request #8096 from ↵Roeland Jago Douma2018-01-311-18/+0
|\ | | | | | | | | nextcloud/feature/6382/do-not-cache-settings-in-db-anymore Do not cache the settings/sections in the database anymore
| * Do not cache the settings/sections in the database anymoreJoas Schilling2018-01-291-18/+0
| | | | | | | | | | | | | | This caused more troubles then it had benefits, especially when an app got disabled or was removed without being disabled. Signed-off-by: Joas Schilling <coding@schilljs.com>
* | Make sure we don't query the AppManager before the installation startedJulius Härtl2018-01-301-2/+5
|/ | | | | | Otherwise we end up with the database not being instantiated Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Use ::class statement instead of stringMorris Jobke2018-01-291-10/+16
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Remove unneeded semicolon and parenthesesMorris Jobke2018-01-261-3/+3
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Merge pull request #7991 from nextcloud/show-trusted-domain-error-in-status.phpRoeland Jago Douma2018-01-241-1/+9
|\ | | | | Send a proper response for status.php on trusted domain error
| * Send a proper response for status.php on trusted domain errorMorris Jobke2018-01-221-1/+9
| | | | | | | | | | | | * fixes #7732 Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Merge pull request #7918 from nextcloud/properly-log-exceptionsRoeland Jago Douma2018-01-231-1/+5
|\ \ | | | | | | Properly log the full exception instead of only the message
| * | Properly log the full exception instead of only the messageMorris Jobke2018-01-231-1/+5
| |/ | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Merge pull request #7354 from nextcloud/refacor-update-page-printblizzz2018-01-221-32/+19
|\ \ | |/ |/| Refactor method to check if update is needed
| * Reuse systemconfigMorris Jobke2017-11-301-6/+5
| | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
| * Refactor method to check if update is neededMorris Jobke2017-11-301-27/+15
| | | | | | | | | | | | There was only one call, that actually needed the parameter to be set to true. So this change moved the print of the page to that location and replaces all other occurences with a direct call to the underlying OCP API. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Fix strict typing issues in lib/base.phpMorris Jobke2018-01-121-6/+6
| | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Fix error log on PHP 7.2Morris Jobke2017-12-121-3/+4
|/ | | | | | Fixes following error in the logs: "ini_set(): A session is active. You cannot change the session module's ini settings at this time" Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Merge pull request #7264 from nextcloud/cache-fetched-appsLukas Reschke2017-11-271-3/+9
|\ | | | | Cache fetched apps in update check
| * Get the Installer via DIMorris Jobke2017-11-251-3/+9
| | | | | | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* | Reset bruteforce attempt table on successful loginMorris Jobke2017-11-241-4/+12
|/ | | | | | * only clear the entries that come from the same subnet, same action and same metadata Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Update license headersMorris Jobke2017-11-061-4/+7
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Add logrote as a default background jobRoeland Jago Douma2017-10-241-13/+0
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Remove SAML hack from base.phpRoeland Jago Douma2017-09-271-16/+1
| | | | | | | This is no longer required now that https://github.com/nextcloud/user_saml/pull/159 is in Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Handle SameSiteCookie check for index.php in AppFramework MiddlewareRoeland Jago Douma2017-09-241-15/+11
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Use the guest.css for the maintenance page as wellMorris Jobke2017-06-131-0/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Reset opcache if update is detectedMorris Jobke2017-05-211-0/+3
| | | | | | This even works if opcache_reset is in the disabled_functions php.ini setting. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Merge pull request #4873 from nextcloud/check-whether-REQUEST-existsMorris Jobke2017-05-151-3/+3
|\ | | | | Check whether the $_SERVER['REQUEST_*'] vars exist before using them
| * Check whether the $_SERVER['REQUEST_*'] vars exist before using themJoas Schilling2017-05-151-3/+3
| | | | | | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* | Allow to enforce update via web UIMorris Jobke2017-05-111-1/+4
|/ | | | | | | | * adds a disclaimer that an update via web UI is on own risk * allows to skip the warning * fixes #4353 Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Properly decide on actual users if instance is too bigMorris Jobke2017-05-101-1/+23
| | | | | | * state the reason why NC thinks it is a big instance Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Fix escaped HTML on error pagesMorris Jobke2017-05-081-3/+2
| | | | | | * fixes #4655 Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* dont spam log when request can't access filesystemRobin Appelman2017-04-281-0/+2
| | | | Signed-off-by: Robin Appelman <robin@icewind.nl>
* Make the emergency disable also accept arraysLukas Reschke2017-04-261-5/+6
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Add activities when email or password is changedJoas Schilling2017-04-131-0/+3
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Move OC_Defaults to OCP\DefaultsMorris Jobke2017-04-091-1/+1
| | | | | | | | | | | | | * currently there are two ways to access default values: OCP\Defaults or OC_Defaults (which is extended by OCA\Theming\ThemingDefaults) * our code used a mixture of both of them, which made it hard to work on theme values * this extended the public interface with the missing methods and uses them everywhere to only rely on the public interface Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Use SystemConfig instead of AllConfig for DB stuffMorris Jobke2017-03-191-2/+2
| | | | | | * preparation for followup PRs to clean up the DB bootstrapping Signed-off-by: Morris Jobke <hey@morrisjobke.de>