Lukas Reschke
|
578aa4e425
|
Removed sectoken
This token is completly useless since an attacker can easily extract it
from the page.
|
2012-09-29 15:18:38 +02:00 |
|
Lukas Reschke
|
bd804b74c4
|
mt_rand() is not secure from a security point of view and predictable. Let's use openssl_random_pseudo_bytes() instead.
Before: 26 bits entropy
After: 72 bits entropy
|
2012-09-29 15:03:09 +02:00 |
Jenkins for ownCloud
|
dc66e94ee3
|
[tx-robot] updated from transifex
|
2012-09-29 02:04:55 +02:00 |
Bart Visscher
|
22d22d19c0
|
Do urlencoding in linkTo functions
|
2012-09-28 22:27:52 +02:00 |
|
Bart Visscher
|
fed34aecfa
|
Fix syntax error in removeETagHook
|
2012-09-28 21:30:06 +02:00 |
|
Bart Visscher
|
24bb7d16b7
|
urlencode filename in search result, fixes problems with & in name
|
2012-09-28 21:18:20 +02:00 |
|
Bart Visscher
|
366ae6661d
|
Simplify generating file search results
|
2012-09-28 21:18:20 +02:00 |
|
Lukas Reschke
|
cfc9839812
|
Merge pull request #19 from arkascha/master
Reimplementation of CSRF protection strategy
|
2012-09-28 10:54:11 -07:00 |
Christian Reiner
|
71454b1bca
|
Fix to preserve backward compatibility for apps creating static links containing the request token (currently the contacts app and maybe some 3rd party implementations)
|
2012-09-28 18:57:20 +02:00 |
Björn Schießle
|
35357f3afb
|
etag has to be removed after version rollback to enable the sync client to detect the changes (bug #1829)
|
2012-09-28 18:50:36 +02:00 |
|
Björn Schießle
|
f8f73e2675
|
move back to "lastmodified" property since "getlastmodified" is protected by webdav
|
2012-09-28 18:50:36 +02:00 |
Christian Reiner
|
4dbd4c35c5
|
Merge branch 'master' of git://github.com/owncloud/core
|
2012-09-28 13:31:01 +02:00 |
|
Christian Reiner
|
743826bbf3
|
Reimplementation of CSRF protection including autorefresh
|
2012-09-28 13:30:44 +02:00 |
|
Jenkins for ownCloud
|
5144d26088
|
[tx-robot] updated from transifex
|
2012-09-28 02:06:03 +02:00 |
Robin Appelman
|
e8df2eeefc
|
some more sane column sizes for appconfig and preferences
|
2012-09-27 22:49:01 +02:00 |
Frank Karlitschek
|
cf14ad2f7d
|
RC 1
|
2012-09-27 04:10:19 +02:00 |
|
Björn Schießle
|
a7292e897a
|
The mtime in the file cache has to be updated after version rollback (copy from outside of the regular files root) (fixes bug #1720)
|
2012-09-26 17:03:54 +02:00 |
|
Björn Schießle
|
50d7cfbbe7
|
prepare server for move of property name "lastmodified" to "getlastmodified" according to RFC4918.
Depreciated const can be removed after sync client update and release
|
2012-09-26 13:06:43 +02:00 |
|
Björn Schießle
|
fcd70246db
|
Merge branch 'master' of github.com:owncloud/core
|
2012-09-26 10:50:06 +02:00 |
|
Björn Schießle
|
c3c6e52104
|
- take webdav namespace for properties into account
- change update routine to add the namesapce to all stored properties
|
2012-09-26 10:48:30 +02:00 |
Michael Gapczynski
|
b4e40b1c21
|
Fix unsetting share expiration date
|
2012-09-26 00:09:35 -04:00 |
|
Michael Gapczynski
|
f967bfc956
|
Properly format the share expiration time for the database, fixes bug oc-1779
|
2012-09-25 23:54:46 -04:00 |
|
Bart Visscher
|
737a6730db
|
Add OC_Files::searchByMime function
Include shared files in result
|
2012-09-25 21:15:01 +02:00 |
|
Lukas Reschke
|
c4fc291fa7
|
Passwords containing a ":" don't work with this explode
Thanks to mETz
|
2012-09-25 19:57:40 +02:00 |
Arthur Schiwon
|
a8ff1505d6
|
backwards compat to older xcache versions, don't fail when trying to clear cache by prefix
|
2012-09-25 11:47:53 +02:00 |
|
Jenkins for ownCloud
|
e5487376da
|
[tx-robot] updated from transifex
|
2012-09-25 02:05:18 +02:00 |
|
Bart Visscher
|
a80e0403a1
|
Fix getting individual shared file information
|
2012-09-24 21:12:32 +02:00 |
Jörn Friedrich Dreyer
|
1e2074b4eb
|
use file instead of dir in search provider file fix result urls
|
2012-09-24 19:24:20 +02:00 |
|
Jenkins for ownCloud
|
ecb90d72f3
|
[tx-robot] updated from transifex
|
2012-09-24 02:04:10 +02:00 |
|
Robin Appelman
|
4131b205d4
|
fix some more phpdoc
|
2012-09-23 02:40:03 +02:00 |
|
Robin Appelman
|
f71f731f1c
|
fix phpdoc and handle some edges cases better in oc_db
|
2012-09-23 02:40:03 +02:00 |
|
Lukas Reschke
|
80aa44565b
|
Sanitize user input
|
2012-09-22 10:51:03 +02:00 |
|
Jenkins for ownCloud
|
01160d0fb4
|
[tx-robot] updated from transifex
|
2012-09-22 01:18:31 +02:00 |
|
Thomas Müller
|
ac69974d73
|
Merge pull request #17 from scambra/4.5-l10n-fixes
Fix some untranslated strings
|
2012-09-21 16:09:30 -07:00 |
|
Bart Visscher
|
40a1899bd9
|
Catch exceptions when updating an app
|
2012-09-21 23:32:52 +02:00 |
|
Bart Visscher
|
4f4498e0d6
|
Fix undefined user var, use getUser
|
2012-09-21 21:29:37 +02:00 |
|
Bart Visscher
|
8820cd934a
|
Forgot to return the fileinfo
|
2012-09-21 21:28:53 +02:00 |
|
Bart Visscher
|
b6dc6c5bb9
|
Don't use OC_FileCache directly, but use the functions in OC_Files
This adds getFileInfo to OC_Files to also get fileinfo from shared files
|
2012-09-21 13:31:12 +02:00 |
scambra
|
e48811017d
|
fix translation for core/lostpassword
|
2012-09-21 11:54:47 +02:00 |
|
Jörn Friedrich Dreyer
|
59a00f95c3
|
use AL32UTF8 charset to connect to oracle, fixes file name encoding problems
|
2012-09-20 21:07:54 +02:00 |
|
Jörn Friedrich Dreyer
|
a4082a526f
|
escape user column in OC_FileCache::clear
|
2012-09-20 21:06:46 +02:00 |
|
Jenkins for ownCloud
|
7c42e88676
|
[tx-robot] updated from transifex
|
2012-09-20 02:09:31 +02:00 |
|
Robin Appelman
|
74ec2765b3
|
db indexes for appconfig and preferences
|
2012-09-20 01:36:52 +02:00 |
Brice Maron
|
86c3761615
|
Catch unreadable app folder error
|
2012-09-19 19:26:57 +00:00 |
|
Frank Karlitschek
|
fe7288b65a
|
beta 4
|
2012-09-19 16:32:40 +02:00 |
|
Arthur Schiwon
|
93d0defe9a
|
set configuvalue in table appconfig back to clob. Likely to break LDAP settings, probably responsible for some bugs with it. Might also cause damage in other apps. That's why it was once already set to clob
|
2012-09-19 12:55:07 +02:00 |
|
Jenkins for ownCloud
|
b0e645fe13
|
[tx-robot] updated from transifex
|
2012-09-19 02:07:26 +02:00 |
|
Bart Visscher
|
703aff6c35
|
Run proxies and emit signals when finising chunked upload
Otherwise the file cache and the quota isn't checked
|
2012-09-18 20:23:17 +02:00 |
Tom Needham
|
30188847a3
|
Only try to delete migration.db if it was created.
|
2012-09-18 16:25:34 +00:00 |
|
Tom Needham
|
be76a55ef0
|
Allow exporting of users from any user backend, fixed oc-1645
|
2012-09-18 16:24:39 +00:00 |
Sam Tuke
|
9df403f051
|
Added failsafes for retrieving remote apps on settings->apps page, in case categories or app data are not found
|
2012-09-18 16:55:03 +01:00 |
|
Björn Schießle
|
2570ea7114
|
don't interpret strpos '0' as 'false' in while loop
|
2012-09-18 16:14:04 +02:00 |
|
Sam Tuke
|
dc0dc56d48
|
Merge branch 'master' of https://github.com/owncloud/core
|
2012-09-18 14:36:08 +01:00 |
|
Sam Tuke
|
b765e883f3
|
Fixed bug with duplicate entries for installed 3rd party apps in settings->apps
Added method getAppstoreApps to OC_App
Added minor documentation
|
2012-09-18 14:35:27 +01:00 |
|
Jenkins for ownCloud
|
06e963c54f
|
[tx-robot] updated from transifex
|
2012-09-18 02:04:26 +02:00 |
|
Robin Appelman
|
2a8ff8a0d4
|
fix problem with quota proxy when using copy
|
2012-09-17 22:16:07 +02:00 |
|
Robin Appelman
|
82ffefb99b
|
dont trigger filesystem hooks when not using the default view
|
2012-09-17 22:16:07 +02:00 |
|
Bart Visscher
|
b1bab6d113
|
Check format of chunked filename
|
2012-09-17 20:00:31 +02:00 |
|
Bart Visscher
|
ce10e1c19a
|
Fix return statement
|
2012-09-17 20:00:31 +02:00 |
|
Bart Visscher
|
ab33578add
|
Normalize path before calling removeETagPropertyForPath
This should also fix the dirname problem on windows
|
2012-09-17 20:00:31 +02:00 |
Björn Schießle
|
92413217b3
|
Merge branch 'master' of github.com:owncloud/core
|
2012-09-17 17:03:57 +02:00 |
|
Björn Schießle
|
1207ae1f99
|
add leading '?' to parameter list (fixes bug #1732)
|
2012-09-17 17:02:17 +02:00 |
|
Jörn Friedrich Dreyer
|
9da150cd3b
|
use user name as db name for oracle connection made with service name
|
2012-09-17 16:32:24 +02:00 |
|
Frank Karlitschek
|
a3718ca036
|
i just learned that we also have to check if directories are readable. it seams that is_readable also checks for 'x' right.
|
2012-09-16 22:49:03 +02:00 |
|
Jenkins for ownCloud
|
fbdefd5601
|
[tx-robot] updated from transifex
|
2012-09-15 02:05:52 +02:00 |
|
Jenkins for ownCloud
|
e41ccd4344
|
[tx-robot] updated from transifex
|
2012-09-14 02:03:18 +02:00 |
Thomas Tanghus
|
fdecee1bda
|
Check if categories is an array.
|
2012-09-13 17:30:26 +02:00 |
|
Frank Karlitschek
|
5a149dcfab
|
mark as an updated beta 3 with some more fixes
|
2012-09-13 11:39:26 +02:00 |
|
Bart Visscher
|
e3e4a2bec2
|
Enable post_write trigger
This is used when uploading a file with webdav. The trigger will add the file to the cache and make it show up in listings
|
2012-09-13 00:12:10 +02:00 |
|
Bart Visscher
|
78a022fda6
|
dirname can also return '.' for empty path
|
2012-09-13 00:09:00 +02:00 |
|
Jörn Friedrich Dreyer
|
d3553ce33d
|
correctly calculate the MDB2 portability
|
2012-09-12 23:10:45 +02:00 |
|
Jörn Friedrich Dreyer
|
c7054f374c
|
log details for an error when upgrading the schema
|
2012-09-12 23:03:56 +02:00 |
|
Jörn Friedrich Dreyer
|
b2d60ed6b7
|
add proper logging to filecache
|
2012-09-12 23:03:56 +02:00 |
|
Jörn Friedrich Dreyer
|
0fe3354c61
|
add proper error logging in OC_User database queries
|
2012-09-12 12:47:33 +02:00 |
|
Jörn Friedrich Dreyer
|
e31dfb643a
|
add getErrorMessage to OC_DB
|
2012-09-12 12:47:33 +02:00 |
|
Frank Karlitschek
|
f31264a0c2
|
this is now 4.5 beta 3
|
2012-09-12 12:12:23 +02:00 |
|
Michael Gapczynski
|
c5f9b887ff
|
Don't call clearCache() for OC_Minimizer statically, create OC_Minimizer objects for both CSS and JS to clear cache after upgrade
|
2012-09-12 01:18:07 -04:00 |
|
Michael Gapczynski
|
ca6322465d
|
Treat getUsers() as case insensitive, helpful for showing proper results in the share with autocomplete
|
2012-09-12 01:12:25 -04:00 |
|
Michael Gapczynski
|
60feaf9abf
|
Merge branch 'master' into share_expiration
Conflicts:
core/js/share.js
lib/util.php
|
2012-09-12 01:06:57 -04:00 |
|
Michael Gapczynski
|
8f0354bcdd
|
Temporarily disable sharing with contacts and emails, will come in next release
|
2012-09-12 01:02:08 -04:00 |
|
Michael Gapczynski
|
b194ac3dde
|
Add expiration column to share table and bump version number
|
2012-09-12 01:01:45 -04:00 |
|
Jenkins for ownCloud
|
8c9c095d48
|
[tx-robot] updated from transifex
|
2012-09-12 02:02:58 +02:00 |
|
Thomas Mueller
|
5c1a79210f
|
added hint to restart the web server in case recetly installed php modules are still not available
|
2012-09-11 23:51:12 +02:00 |
|
Jörn Friedrich Dreyer
|
b6a106a920
|
allow using only dbname for oracle
|
2012-09-11 18:12:38 +02:00 |
|
Jörn Friedrich Dreyer
|
bf2d1e78f2
|
don't set values with oc_appconfig when oc is not installed yet, allows to render guest page for installation again
|
2012-09-11 13:16:34 +02:00 |
|
Michael Gapczynski
|
37f0b85d3f
|
Fix problem with non share collection item types being treated as collections
|
2012-09-11 00:37:31 -04:00 |
|
Jenkins for ownCloud
|
6a29bbda7a
|
[tx-robot] updated from transifex
|
2012-09-11 02:03:53 +02:00 |
Georg Ehrke
|
463b48b2e1
|
fix file upload
|
2012-09-10 14:41:27 +02:00 |
|
Jörn Friedrich Dreyer
|
86c3f9b8fe
|
Merge branch 'master' of github.com:owncloud/core
|
2012-09-10 14:14:49 +02:00 |
|
Jörn Friedrich Dreyer
|
db7a18455f
|
use tabs for indentation
|
2012-09-10 14:14:36 +02:00 |
|
Thomas Müller
|
5a65c5a46c
|
Respect coding style
|
2012-09-10 14:59:08 +03:00 |
|
Thomas Müller
|
0444877218
|
Respect coding style
|
2012-09-10 12:35:15 +03:00 |
|
Thomas Müller
|
c6cd1b77d3
|
Respect coding style
|
2012-09-10 12:32:49 +03:00 |
|
Thomas Müller
|
5721bd2786
|
Respect coding style
|
2012-09-10 12:31:57 +03:00 |
|
Thomas Müller
|
1a10955644
|
Respect coding style
|
2012-09-10 12:29:35 +03:00 |
|
Thomas Müller
|
2271a97992
|
Respect coding style
|
2012-09-10 12:28:09 +03:00 |
|
Thomas Müller
|
9a2bc5255b
|
Respect coding style
|
2012-09-10 12:26:20 +03:00 |
|
Thomas Müller
|
23f348c99f
|
Respect coding style
|
2012-09-10 12:25:42 +03:00 |
|
Thomas Müller
|
87e1a27fde
|
Respect coding style
|
2012-09-10 12:23:55 +03:00 |
|
Thomas Müller
|
f34588d1ff
|
Respect coding style
|
2012-09-10 12:21:54 +03:00 |