mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
nextcloud/settings/ajax/setsecurity.php

22 lines
663 B
PHP
Raw Normal View History

Add security section to admin menu Currently it only allows the admin to enable or disable the HTTPS enforcement, but in the future it could be expanded to further options. The HTTPS enforcement only allows the admin to enforce it, if he is connected via HTTPS. (To prevent admins to enable it without a proper SSL setup)
2013-01-11 17:18:51 +04:00
<?php
/**
Add a trusted domain wizard Adds a little button to the trusted domain warning, if an admin clicks on the warning he will be redirected to ownCloud and asked whether he want to trust this domain. By far not the cleanest code, or clean at all, but does the job and I don't see a reason to make a lot of changes for this little improvement.
2014-08-22 00:22:35 +04:00
* Copyright (c) 2013-2014, Lukas Reschke <lukas@owncloud.com>
Add security section to admin menu Currently it only allows the admin to enable or disable the HTTPS enforcement, but in the future it could be expanded to further options. The HTTPS enforcement only allows the admin to enforce it, if he is connected via HTTPS. (To prevent admins to enable it without a proper SSL setup)
2013-01-11 17:18:51 +04:00
* This file is licensed under the Affero General Public License version 3 or later.
* See the COPYING-README file.
*/
OC_Util::checkAdminUser();
OCP\JSON::callCheck();
Add a trusted domain wizard Adds a little button to the trusted domain warning, if an admin clicks on the warning he will be redirected to ownCloud and asked whether he want to trust this domain. By far not the cleanest code, or clean at all, but does the job and I don't see a reason to make a lot of changes for this little improvement.
2014-08-22 00:22:35 +04:00
if(isset($_POST['enforceHTTPS'])) {
Redirect user after clicking on link Use DI
2014-08-22 18:01:03 +04:00
\OC::$server->getConfig()->setSystemValue('forcessl', filter_var($_POST['enforceHTTPS'], FILTER_VALIDATE_BOOLEAN));
Add a trusted domain wizard Adds a little button to the trusted domain warning, if an admin clicks on the warning he will be redirected to ownCloud and asked whether he want to trust this domain. By far not the cleanest code, or clean at all, but does the job and I don't see a reason to make a lot of changes for this little improvement.
2014-08-22 00:22:35 +04:00
}
if(isset($_POST['trustedDomain'])) {
Redirect user after clicking on link Use DI
2014-08-22 18:01:03 +04:00
$trustedDomains = \OC::$server->getConfig()->getSystemValue('trusted_domains');
Add a trusted domain wizard Adds a little button to the trusted domain warning, if an admin clicks on the warning he will be redirected to ownCloud and asked whether he want to trust this domain. By far not the cleanest code, or clean at all, but does the job and I don't see a reason to make a lot of changes for this little improvement.
2014-08-22 00:22:35 +04:00
$trustedDomains[] = $_POST['trustedDomain'];
Redirect user after clicking on link Use DI
2014-08-22 18:01:03 +04:00
\OC::$server->getConfig()->setSystemValue('trusted_domains', $trustedDomains);
Add a trusted domain wizard Adds a little button to the trusted domain warning, if an admin clicks on the warning he will be redirected to ownCloud and asked whether he want to trust this domain. By far not the cleanest code, or clean at all, but does the job and I don't see a reason to make a lot of changes for this little improvement.
2014-08-22 00:22:35 +04:00
}
Add security section to admin menu Currently it only allows the admin to enable or disable the HTTPS enforcement, but in the future it could be expanded to further options. The HTTPS enforcement only allows the admin to enforce it, if he is connected via HTTPS. (To prevent admins to enable it without a proper SSL setup)
2013-01-11 17:18:51 +04:00
Add _many_ newlines at the end of files
2013-08-18 13:02:08 +04:00
echo 'true';