aboutsummaryrefslogtreecommitdiffstats
path: root/lib/private
Commit message (Collapse)AuthorAgeFilesLines
* don't allow to create a federated share if source and target server are the sameBjörn Schießle2015-12-142-2/+45
|
* Check if user isset in $_REQUEST firstRobin Appelman2015-12-141-3/+5
|
* Merge pull request #20878 from ↵Thomas Müller2015-12-111-25/+8
|\ | | | | | | | | owncloud/proper-htaccess-support-in-code-signing-checker Also run .htaccess routine when installing on another system than Apache
| * Don't write directives from CLILukas Reschke2015-12-081-0/+5
| |
| * Run .htaccess updates in any caseLukas Reschke2015-12-081-5/+3
| | | | | | | | This is the same what we also do in updater.php and thus this aligns the code. Makes the code paths more consistent.
| * Remove version check out of .htaccessLukas Reschke2015-12-081-20/+0
| | | | | | | | This can now be achieved using the new code signing.
* | Merge pull request #21135 from owncloud/add-polyfillThomas Müller2015-12-116-96/+17
|\ \ | | | | | | Add polyfills for PHP55, PHP56 and PHP70 functionalities
| * | Use PHP polyfillsLukas Reschke2015-12-116-96/+17
| | |
* | | Merge pull request #21020 from owncloud/add-directory-slash-to-setup-codeThomas Müller2015-12-111-0/+3
|\ \ \ | | | | | | | | Add DirectorySlash to dynamic .htaccess write
| * | | Add DirectorySlash to dynamic .htaccess writeLukas Reschke2015-12-081-0/+3
| | |/ | |/| | | | | | | | | | | | | | | | | | | When `DirectorySlash off` is set then Apache will not lookup folders anymore. This is required for example when we use the rewrite directives on an existing path such as `/core/search`. By default Apache would load `/core/search/` instead `/core/search` so the redirect would fail here. This leads however to the problem that URLs such as `localhost/owncloud` would not load anymore while `localhost/owncloud/` would. This has caused problems such as https://github.com/owncloud/core/pull/21015 With this change we add the `DirectorySlash off` directive only when the `.htaccess` is writable to the dynamic part of it. This would also make `localhost/owncloud` work again as it would trigger the 404 directive which triggers the redirect in base.php.
* | | Merge pull request #21045 from owncloud/scrutinizer-patch-1Thomas Müller2015-12-112-4/+3
|\ \ \ | | | | | | | | Scrutinizer Auto-Fixes
| * | | Scrutinizer Auto-FixesScrutinizer Auto-Fixer2015-12-102-4/+3
| | | | | | | | | | | | | | | | This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com
* | | | Merge pull request #21128 from owncloud/dav-fopen-non-existingThomas Müller2015-12-111-8/+14
|\ \ \ \ | |_|_|/ |/| | | Dont do a seperate request to check if a file exists when downloading a file from dav external storage
| * | | Dont do a seperate request to check if a file exists for dav->fopenRobin Appelman2015-12-101-8/+14
| | | |
* | | | Merge pull request #21119 from owncloud/make-appconfig-more-robustThomas Müller2015-12-101-0/+7
|\ \ \ \ | |_|/ / |/| | | Make AppManager->checkAppForUser more robust
| * | | Make AppManager->checkAppForUser more robustMorris Jobke2015-12-101-0/+7
| | | | | | | | | | | | | | | | | | | | * if the JSON that is stored in the DB is corrupt an error was thrown * with this change it is properly handled and the app is disabled
* | | | Merge pull request #21086 from owncloud/storage-nocheckavailforgetownerThomas Müller2015-12-101-1/+0
|\ \ \ \ | |/ / / |/| | | Do not check storage availability for getOwner
| * | | Do not check storage availability for getOwnerVincent Petry2015-12-091-1/+0
| | | | | | | | | | | | | | | | | | | | Because the owner is always known thanks to the file cache and other places, we don't need the remote storage to be actually available.
* | | | Merge pull request #21072 from owncloud/db-lock-ttlThomas Müller2015-12-101-3/+3
|\ \ \ \ | | | | | | | | | | Remove all locks after ttl from the db
| * | | | Remove all locks after ttl from the dbRobin Appelman2015-12-091-3/+3
| | | | |
* | | | | Merge pull request #21073 from owncloud/memcache-lock-ttlThomas Müller2015-12-104-4/+17
|\ \ \ \ \ | |_|_|/ / |/| | | | Add ttl for redis based locking
| * | | | ttl for memcache locking backends that support itRobin Appelman2015-12-093-2/+11
| | | | |
| * | | | Add interface for memcache backends that support setting ttl on exisiting keysRobin Appelman2015-12-091-2/+6
| |/ / /
* | | | Merge pull request #20984 from owncloud/fix-mysql-setup-unix-socket-masterThomas Müller2015-12-101-6/+19
|\ \ \ \ | | | | | | | | | | Add unix_socket support for mysql during initial installation - fixes…
| * | | | Add unix_socket support for mysql during initial installation - fixes #20210Thomas Müller2015-12-071-6/+19
| | | | |
* | | | | Merge pull request #20775 from owncloud/comments-managerThomas Müller2015-12-095-0/+945
|\ \ \ \ \ | |_|_|/ / |/| | | | add icommentsmanger and icomment implementation
| * | | | use getLastInsertId from query builder for convenienceArthur Schiwon2015-12-091-1/+1
| | | | |
| * | | | remove unused use statementArthur Schiwon2015-12-091-1/+0
| | | | |
| * | | | php < 5.5 compatibleArthur Schiwon2015-12-091-5/+5
| | | | |
| * | | | improve PHP doc and remove superflous by reference indicatorArthur Schiwon2015-12-091-5/+5
| | | | |
| * | | | hardening, add some checks for whitespace-only stringsArthur Schiwon2015-12-091-14/+15
| | | | |
| * | | | OC not ocArthur Schiwon2015-12-091-2/+2
| | | | |
| * | | | parameter checks for setting actor and object to happen only in one placeArthur Schiwon2015-12-092-13/+8
| | | | |
| * | | | fix usage of emptyArthur Schiwon2015-12-091-6/+6
| | | | |
| * | | | different strategy in cleaning up after user was deletedArthur Schiwon2015-12-094-6/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | we do not listen to deletion hooks anymore, because there is no guarantee that they will be heard - requires that something fetches the CommentsManager first. Instead, in the user deletion routine the clean up method will be called directly. Same way as it happens for files, group memberships, config values.
| * | | | add icommentsmanger and icomment implementationArthur Schiwon2015-12-094-0/+951
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | register CommentsManager service, allow override, document in config.sample.php don't insert autoincrement ids in tests, because of dislikes from oracle and pgsql specify timezone in null date only accepts strings for ID parameter that can be converted to int replace forgotten hardcoded IDs in tests react on deleted users react on file deletion Postgresql compatibility lastInsertId needs *PREFIX* with the table name do not listen for file deletion, because it is not reliable (trashbin, external storages) add runtime cache for comments
* | | | | Don't load commands of apps when in maintenance mode - fixes #20939Thomas Müller2015-12-091-4/+6
|/ / / /
* | | | Merge pull request #21060 from owncloud/support-for-read-only-config-dirThomas Müller2015-12-091-7/+9
|\ \ \ \ | |_|/ / |/| | | Add support for read only config dir
| * | | Add support for read only config dirLukas Reschke2015-12-091-7/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We already support the `config_is_read_only` for the config file itself. However not for the whole directory (which is a bug). This unifies the check in the checkServer routine with the one in base.php. Now one can enable a read only config folder so that ownCloud is not allowed to overwrite it's own source code. To test this set the whole config folder to read only, clear your session, refresh, see it fails, add the new code, refresh, see it works. Also verify that setup still works fine. (obviously setup does not work with a read only config Also verify that setup still works fine. (obviously setup does not work with a read only config)) Fixes https://github.com/owncloud/core/issues/14455
* | | | Merge pull request #21061 from owncloud/fix-oracle-last-insert-id-testThomas Müller2015-12-091-6/+22
|\ \ \ \ | | | | | | | | | | Fix the last insert id test by changing to an autoincremen…
| * | | | Do not quote the table name for lastInsertId()Joas Schilling2015-12-091-6/+22
| |/ / /
* | | | Merge pull request #21056 from owncloud/check-returnThomas Müller2015-12-092-3/+7
|\ \ \ \ | | | | | | | | | | Verify return type
| * | | | Verify return typeLukas Reschke2015-12-092-3/+7
| |/ / / | | | | | | | | | | | | Can also be null. Silences another security warning...
* | | | Merge pull request #21055 from owncloud/fix-php-docs-for-consoleThomas Müller2015-12-091-1/+10
|\ \ \ \ | | | | | | | | | | Fix PHPDoc and check if path does exists
| * | | | Fix PHPDoc and check if path does existsLukas Reschke2015-12-091-1/+10
| |/ / / | | | | | | | | | | | | Mutes another security warning of some static scanners.
* | | | Merge pull request #21005 from owncloud/verify_password_before_unshareThomas Müller2015-12-091-0/+5
|\ \ \ \ | | | | | | | | | | The ajax code path unshares a link share when updating the password
| * | | | The ajax code path unshares a link share when updating the passwordRoeland Jago Douma2015-12-071-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | In order to not mess up existing shares if the password gets verified we should first fire this validation.
* | | | | Merge pull request #21038 from owncloud/share-computesharepermissions-notstoreThomas Müller2015-12-093-6/+8
|\ \ \ \ \ | | | | | | | | | | | | Fix (re)share permission checks in a few code paths
| * | | | | Add explicit check for groups excluded from sharingVincent Petry2015-12-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since isSharable() doesn't do the check for groups excluded from sharing, adding an explicit check in the sharing code.
| * | | | | Add reshare permission checksVincent Petry2015-12-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added in isSharable() in incoming remote share. Added in isSharable() in regular incoming share. Added in FileInfo to make sure the proper attributes are returned to the clients.