summaryrefslogtreecommitdiffstats
path: root/lib/base.php
Commit message (Collapse)AuthorAgeFilesLines
* Allow to call status.php before the instance is installedJoas Schilling2016-09-061-1/+1
|
* Run the license scriptJoas Schilling2016-07-221-8/+10
|
* Use the themed Defaults everywhereJoas Schilling2016-07-151-1/+1
|
* Add exemption for ACS endpointLukas Reschke2016-06-291-0/+17
| | | | | | | | | | | | | | | | | In a SAML scenario we don't get any strict or lax cookie send for the ACS endpoint. Since we have some legacy code in Nextcloud (direct PHP files) the enforcement of lax cookies is performed here instead of the middleware. This means we cannot exclude some routes from the cookie validation, which normally is not a problem but is a little bit cumbersome for this use-case. Once the old legacy PHP endpoints have been removed we can move the verification into a middleware and also adds some exemptions. Not super awesome code to have but the best that I could come up with that doesn't add another ton of technical debt.
* some text-changes to nextcloudJoachim Sokolowski2016-06-221-11/+11
|
* fixed codeMorris Jobke2016-06-201-5/+5
|
* Add more brandingLukas Reschke2016-06-131-1/+1
| | | | | - Shows "Nextcloud will be updated" in the updater screen - Shows "Nextcloud" if you add a bookmark on iOS instead of "ownCloud"
* Add Same Site Cookie protectionLukas Reschke2016-06-101-0/+66
|
* Print error message again, when 3rdparty submodule is not initializedArthur Schiwon2016-06-081-1/+3
| | | | | - old code used Response which attempted to use OC::$server which is not and cannot be intialised at this part of the code.
* Show hint in CLIVictor Dubiniuk2016-04-061-1/+1
|
* Show release notesVictor Dubiniuk2016-04-051-0/+3
|
* fix creation of versions of encrypted files on external storagesBjoern Schiessle2016-03-311-1/+2
| | | | | | in order to create a 1:1 copy of a file if a version gets created we need to store this information on copyBetweenStorage(). This allows us to by-pass the encryption wrapper if we read the source file.
* Use raw PATH_INFOLukas Reschke2016-03-181-1/+1
| | | | | | PATH_INFO will be empty at this point and thus the logic in base.php did not catch this. Changing this to "getRawPathInfo" will ensure that the path info is properly read. Fixes https://github.com/owncloud/core/issues/23199
* Merge pull request #22943 from owncloud/backport-22800-stable9Thomas Müller2016-03-141-0/+3
|\ | | | | [9.0] don't hide server not available exception, fixes #20536
| * don't hide server not available exception, fixes #20536Arthur Schiwon2016-03-081-0/+3
| |
* | Do not set response status in CLI in case of errorVincent Petry2016-03-101-1/+3
|/
* Update author informationLukas Reschke2016-03-011-0/+1
| | | | Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)
* Disable app that bricks the server after enablingVincent Petry2016-02-291-2/+18
| | | | | | If an app is getting enabled in the web UI, an ajax call is now made to make sure the server still works. If it doesn't, it sends an emergency app disabling call to disable the breaking app.
* Pass checked host as "domain" variable to "untrustedDomain" template.Joachim Bauch2016-02-151-1/+1
| | | | Currently the "SERVER_NAME" is passed to the template, which in some cases doesn't match the host returned by "getInsecureServerHost" (or is empty).
* The local address book is replaced now by the system addressbook as part of ↵Thomas Müller2016-02-021-9/+0
| | | | the dav app
* Ignore GD JPEG warningsLukas Reschke2016-01-271-0/+1
| | | Fixes https://github.com/owncloud/core/issues/21873
* move setup controller to core/controllerMorris Jobke2016-01-201-1/+1
|
* Happy new year!Thomas Müller2016-01-121-3/+3
|
* getMediumStrengthGenerator is deprecated and does not do anything anymoreRoeland Jago Douma2016-01-111-1/+1
|
* Only '/tests' to be autoloaded when running unit testsRoeland Jago Douma2016-01-101-1/+3
|
* OC autoloader is not allowed to load 3rdpartyRoeland Jago Douma2016-01-101-1/+0
|
* Remove code related to session regeneration after some timeLukas Reschke2016-01-101-11/+1
| | | | I do not really consider this necessary or a real security addition. Let's get rid of it thus, cleans up the code and makes the logic easier.
* Use ISession::clearLukas Reschke2016-01-101-4/+1
| | | | The native approach using the PHP calls will not work properly with the cryptowrapper and thus this code is effectively doing nothing at the moment.
* Check if app does existsLukas Reschke2016-01-071-1/+6
|
* Move regeneration of session ID into session classesLukas Reschke2016-01-041-1/+1
| | | | There were code paths that nowadays call ISession::login directly thus bypassing the desired regeneration of the session ID. This moves the session regeneration deeper into the session handling and thus ensures that it is always called. Furthermore, I also added the session regeneration to the remember me cookie plus added some test case expectations for this.
* Refactor OC_Util::callCheckMorris Jobke2015-12-221-1/+1
|
* Use OCP\Util::getVersion instead of the internal private implementationMorris Jobke2015-12-181-2/+2
|
* Use SystemConfig internallyRoeland Jago Douma2015-12-181-6/+6
|
* Inject Config into SystemConfigRoeland Jago Douma2015-12-181-2/+2
|
* Get rid of legacy OC_ConfigRoeland Jago Douma2015-12-181-6/+11
| | | | | We were still using the lecagy class OC_Config all over the place. Which was a wrapper around the new class OC\Config
* Remove deprecated function OC_User::getManagerRoeland Jago Douma2015-12-171-1/+1
| | | | | Private deprecated function => removed Replaced all instances with suggested replacement
* Use URLGenerator instead of hard-coded WEBROOTLukas Reschke2015-12-031-2/+2
| | | | Fixes https://github.com/owncloud/core/issues/20922
* Execute only for web and not for CLILukas Reschke2015-12-021-7/+7
|
* Ensure that ownCloud is always accessed with a trailing slashLukas Reschke2015-12-021-0/+8
|
* Untangle the linkToDocs method in OC_HelperMorris Jobke2015-11-261-2/+5
| | | | | * now uses the proper URLGenerator interface * add comment about DI problems
* Add warning log entry when user accesses untrusted domainLukas Reschke2015-11-101-0/+9
|
* [autoloader] Make sure to load construct full pathsRoeland Jago Douma2015-11-061-6/+0
| | | | | This reduces a lot of the autoloader magic and makes sure that we generate full paths in the autoloader.
* Use IRequest's `getScriptName` functionality instead of $_SERVER['SCRIPT_NAME']Lukas Reschke2015-10-211-1/+13
|
* Delete cookie instead of emptying valueLukas Reschke2015-10-191-1/+2
| | | | | | | | PHP will handle session cookies with an empty values as an E_WARNING error. ([php/#68063](https://bugs.php.net/bug.php?id=68063)) ownCloud sets the cookie to an empty value in case the session expires, it however after this starts a new session. Due to potential race conditions this can in unlikely cases lead to the fact that the session never gets restarted and the user is left with an empty cookie. PHP tries then to use the empty cookie which makes the instance not usable. To work around any race condition we now tell PHP to explicitly delete the value which can be done by using `null` as value, PHP will then send a cookie with the value "deleted". Also theepiration has been set to -1.
* Make sure that remote shares use the correct uid casingJoas Schilling2015-10-061-0/+8
|
* update licence headers via scriptMorris Jobke2015-10-051-1/+3
|
* cache result of \OCP\Util::needUpgrade()Individual IT Services2015-09-291-6/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | reduce calls of \OCP\Util::needUpgrade() where \OCP\Util::needUpgrade() is called we can call as well self::checkUpgrade and use the cached result In line 877 the call way unnecessary anyway because of the first part of the if statement move caching to \OCP\Util::needUpgrade renaming variable fixing testNeedUpgradeCore() cache result of checkUpgrade() in self::$needUpgrade reduce calls of \OCP\Util::needUpgrade() where \OCP\Util::needUpgrade() is called we can call as well self::checkUpgrade and use the cached result In line 877 the call way unnecessary anyway because of the first part of the if statement move caching to \OCP\Util::needUpgrade renaming variable fixing testNeedUpgradeCore() fix typo in variable name deleting tabs
* Merge pull request #19293 from owncloud/individual-it-move_initTemplateThomas Müller2015-09-251-65/+1
|\ | | | | [jenkins] do not load unnecessary code in case of webdav
| * do not load unnecessary code in case of webdavIndividual IT Services2015-09-231-65/+1
| | | | | | | | | | | | | | | | | | | | | | | | changing from "protected static" to "protected" as suggested by @nickvergessen https://github.com/owncloud/core/pull/19114#discussion_r39719851 moving initTemplate() into template constr. reduce to move initTemplate only cleanup spaces
* | Merge pull request #15098 from owncloud/fix_preview_versions_revert_issueThomas Müller2015-09-241-1/+2
|\ \ | |/ |/| fix issue with version rollback and thumbnails