summaryrefslogtreecommitdiffstats
path: root/lib/private/Setup.php
Commit message (Collapse)AuthorAgeFilesLines
* Allow to serve static mp4 directlyJulius Härtl2020-02-121-1/+1
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Allow to serve static webm directlyRoeland Jago Douma2020-02-121-1/+1
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Split the exception handling so install errors don't log as setup errorsJoas Schilling2020-02-061-3/+11
| | | | | | More gebuging Signed-off-by: Joas Schilling <coding@schilljs.com>
* Fix data Apache2 .htaccess typoSimounet2020-02-051-1/+1
| | | | Signed-off-by: Simounet <contact@simounet.net>
* Update license headers for 18Christoph Wurst2019-12-201-0/+2
| | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* Merge pull request #16792 from MichaIng/patch-1Roeland Jago Douma2019-12-191-13/+23
|\ | | | | Harden data and config protection .htaccess
| * Merge branch 'master' into patch-1MichaIng2019-12-041-41/+52
| |\
| * | Add missing newlines to .htaccessMichaIng2019-10-311-2/+2
| | | | | | | | | Signed-off-by: MichaIng <micha@dietpi.com>
| * | Add "Order" to assure that no parental "Allow" can grant accessMichaIng2019-09-261-0/+2
| | | | | | | | | Signed-off-by: MichaIng <micha@dietpi.com>
| * | Minor syntaxMichaIng2019-08-191-21/+21
| | | | | | | | | | | | | | | | | | | | | + Use Apache syntax with cases according to official docs: https://github.com/nextcloud/server/pull/16792/files#r315207691 + Add missing whitespace for concatenating strings to variable: https://github.com/nextcloud/server/pull/16792/files#r315207520 + Apache 2.5 will be released as 2.6: https://github.com/nextcloud/server/pull/16792/files#r315206147 Signed-off-by: Micha Felle <micha@dietpi.com>
| * | Update lib/private/Setup.php MichaIng2019-08-191-1/+1
| | | | | | | | | | | | | | | + Remove unnecessary spaces from code Co-Authored-By: Daniel Kesselberg <mail@danielkesselberg.de>
| * | Harden data protection .htaccessMichaIng2019-08-191-8/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | + Set "Satisfy All" whenever available, as well on Apache 2.4+. This is required to override possible "Satisfy Any" on parent dir, which otherwise would allow direct access to data, regardless of "Require" directive. + Set "Deny from all" as well whenever available, to block access regardless of which access control directive takes priority. + Assume Apache 2.2 only, if mod_authz_core and mod_access_compat are both not available, to avoid doubled directives. In this case set "Deny from all" directive only if the providing mod_authz_host module is available. "Satisfy" is a core directive on Apache 2.2. + Update Apache version strings. Regarding the used directives/modules, Apache 2.4 and 2.5 behave the same. + Add ordering spaces to better reflect the nested directives and to match style of other .htaccess files. Fixes: https://github.com/nextcloud/server/issues/6449 Signed-off-by: Micha Felle <micha@dietpi.com>
* | | Update license headersChristoph Wurst2019-12-051-4/+7
| |/ |/| | | | | Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>
* | Set last-password-confirmation for setupRoeland Jago Douma2019-12-031-0/+4
| | | | | | | | | | | | | | Else you have to enter your password directly after setup if you do anything admin worthy. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* | reformat Setup.phpArthur Schiwon2019-11-251-55/+59
| | | | | | | | Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* | fix documentation, get and createGroup may return nullArthur Schiwon2019-11-251-1/+4
|/ | | | | | * also have stricter checks in place Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
* Allow to access source maps on apacheJulius Härtl2019-06-191-1/+1
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* make sure that the ocm end-point discovery /ocm-provider is not redirected ↵Bjoern Schiessle2019-02-201-0/+1
| | | | | | to the index.php Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>
* Fix loading of .woff2 files in .htaccessJulius Härtl2018-11-181-1/+1
| | | | Signed-off-by: Julius Härtl <jus@bitgrid.net>
* Merge pull request #11446 from nextcloud/bugfix/10678/pretty-urls-dont-workMorris Jobke2018-10-021-3/+2
|\ | | | | Allow overwrite.cli.url without trailing slash
| * Allow url without / for overwrite.cli.urlDaniel Kesselberg2018-09-281-3/+2
| | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | Validate email in occ commandDaniel Kesselberg2018-10-021-6/+1
| | | | | | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | Use setUserValue instead setEMailAddress because latter omits an changeUser ↵Daniel Kesselberg2018-10-021-8/+10
| | | | | | | | | | | | events. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* | Add --admin-email to cli installerDaniel Kesselberg2018-10-021-0/+9
|/ | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Change visibility to privateDaniel Kesselberg2018-09-131-1/+1
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Change return false to throw newDaniel Kesselberg2018-09-101-5/+12
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Extract logic for webroot into method and add testDaniel Kesselberg2018-09-101-9/+22
| | | | Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
* Add the jobRoeland Jago Douma2018-05-141-0/+2
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Correct mistaken regex wildcard in .htaccessDan Callahan2018-02-281-1/+1
| | | | | | Fixes #8578 Signed-off-by: Dan Callahan <dan.callahan@gmail.com>
* Fix proper overwrite URL on CLI installMorris Jobke2018-02-071-3/+8
| | | | | | | | | | | | | * regression from #7835 Steps * having a my.config.php with a proper `overwrite.cli.url` and `htaccess.RewriteBase` set * install with this * before: short URLs where broken and you need to call `occ maintenance:update:htaccess` additionally to fix this * after: occ install results in a proper htaccess like on stable13 Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Handle SSL certificate verifications for others than Let's EncryptRobert Scheck2018-02-051-1/+1
| | | | | | | | | | | | | | | | | Do no longer (wrongly) rewrite URLs like * http://example.net/.well-known/pki-validation/file.txt (Comodo) * http://example.net/.well-known/pki-validation/fileauth.txt (DigiCert, Thawte, GeoTrust) * http://example.net/.well-known/pki-validation/gsdv.txt (GlobalSign) * http://example.net/.well-known/pki-validation/starfield.htm (Starfield, GoDaddy) * http://example.net/.well-known/pki-validation/swisssign-check.txt (SwissSign) for automated SSL certificate verifications. All (common commercial) certificate authorities (CA) except Let's Encrypt (via ACME) seem to use "pki-validation" rather "acme-challenge" for their domain control validation (DCV). Signed-off-by: Robert Scheck <robert@fedoraproject.org>
* Fix case when overwrite URL is empty during setupMorris Jobke2018-01-151-0/+3
| | | | | | Found while testing strict typing for PHP 7+. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Get the Installer via DIMorris Jobke2017-11-251-12/+16
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Revert "Only allow colons in db host for IPv6 addresses"Morris Jobke2017-11-081-16/+0
| | | | | | This reverts commit 1287d6ddb303fc9b088b8a6837490042a1540dc6. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Run updated license header updaterMorris Jobke2017-11-071-1/+1
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Update license headersMorris Jobke2017-11-061-1/+3
| | | | Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Add logrote as a default background jobRoeland Jago Douma2017-10-241-1/+4
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Code clean upJoas Schilling2017-09-261-48/+47
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Only allow colons in db host for IPv6 addressesJoas Schilling2017-09-261-0/+16
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Fix L10N::tRoeland Jago Douma2017-08-011-2/+2
| | | | Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
* Fix 403 and 404 redirectMorris Jobke2017-07-261-2/+2
| | | | | | | | * Nextcloud is not properly loaded in the standalone version (especially the theming) * it is already not listed anymore in the Nginx config (see nextcloud/documentation#392) * the index.php-free version doesn't support this Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Install from migrationsJoas Schilling2017-07-251-2/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Start migrationsJoas Schilling2017-07-051-0/+2
| | | | | | | | | | Fixme: - Install and update of apps - No revert on live systems (debug only) - Service adjustment to our interface - Loading via autoloader Signed-off-by: Joas Schilling <coding@schilljs.com>
* Don't redirect requests to /core/img/manifest.jsonLukas Reschke2017-05-091-0/+1
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Add app bundlesLukas Reschke2017-04-261-2/+18
| | | | Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
* Move OC_Defaults to OCP\DefaultsMorris Jobke2017-04-091-5/+7
| | | | | | | | | | | | | * currently there are two ways to access default values: OCP\Defaults or OC_Defaults (which is extended by OCA\Theming\ThemingDefaults) * our code used a mixture of both of them, which made it hard to work on theme values * this extended the public interface with the missing methods and uses them everywhere to only rely on the public interface Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Use SystemConfig instead of AllConfig for DB stuffMorris Jobke2017-03-191-9/+9
| | | | | | * preparation for followup PRs to clean up the DB bootstrapping Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Namespace and array syntax fixesMorris Jobke2017-03-191-7/+7
| | | | | | * minor fixes in preparation of a bigger DB and config PR Signed-off-by: Morris Jobke <hey@morrisjobke.de>
* Serve robots.txt if the RewriteBase is configuredFrank Isemann2017-03-061-0/+1
|
* Update Setup.phpKB77772017-02-241-1/+1
|