Commit Graph

2406 Commits (375eae1a5c1cd97501e6f2b770ee2b22668a91e1)

Author SHA1 Message Date
Arthur Schiwon 0f489e80ad LDAP: transliterate other latin characters to ASCII when creating owncloud names. Already created usernames are not being affected. Fixes ugly names with removed Umlauts, chars with accents and likes. 2012-09-18 17:10:21 +07:00
Victor Dubiniuk 95a748152e Fix for cyrillic folder names. ref#oc-1683 2012-09-11 23:57:13 +07:00
Georg Ehrke b37d318159 back port better input validation in calendar from apps repo 2012-08-31 14:27:03 +07:00
Arthur Schiwon b11203537e LDAP: check for existing username from other backends when creating one for an LDAP user or group. Fixes oc-1551 in stable4. Also optimizes groupExists() function as side effect. 2012-08-29 18:07:32 +07:00
Lukas Reschke 5afdfec91d Sanitizing the user input to prevent a reflected XSS. Thanks to Nico Golde (ngolde.de) 2012-08-21 17:56:20 +07:00
Arthur Schiwon 2051a5db5d Fix deletion for browser that do not support onBeforeUnload, fixes oc-1534 2012-08-20 17:04:57 +07:00
Lukas Reschke 4984a72d0d Add a missing exit(); 2012-08-18 14:57:19 +07:00
Lukas Reschke 45003593e1 Use SCRIPT_NAME instead of PHP_SELF which won't send the PATH_INFO, this prevents XSS in old browsers. Thanks to Nico Golde. 2012-08-18 09:26:58 +07:00
Lukas Reschke 4682846d3e Disable user enumeration 2012-08-14 17:19:20 +07:00
Lukas Reschke 2024d424cd Disable listing of all users 2012-08-13 01:22:53 +07:00
Lukas Reschke 2871896d54 Check if webfinger is enabled 2012-08-10 16:38:32 +07:00
Michael Gapczynski e9a63900de Don't return file handle if the mode supports writing and the file is not writable
Conflicts:
	apps/files_sharing/sharedstorage.php
2012-08-10 09:46:44 +07:00
Lukas Reschke 7581d55428 Missed an "echo" 2012-08-09 22:17:52 +07:00
Lukas Reschke aae17d4ae8 Sanitize user input 2012-08-09 22:14:48 +07:00
Arthur Schiwon e9e84b5c3b Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4 2012-08-05 21:17:39 +07:00
Georg Ehrke c32a99b14c fix label for versioning in admin settings 2012-08-04 18:50:05 +07:00
Bart Visscher 758ae42df0 Calendar: remove double html encoding 2012-08-03 16:26:05 +07:00
Bart Visscher 0970a3c60e Contacts: Fix no active Addressbooks 2012-08-03 16:11:10 +07:00
Arthur Schiwon 6b78ca1a5a LDAP: sanitize base, user and group trees. fixes oc-1302 2012-08-03 15:51:25 +07:00
Arthur Schiwon b523366acd LDAP: don't die on unexpected collisions, handle empty display-name attributes properly 2012-07-30 17:30:11 +07:00
Michael Gapczynski b9bd54bd98 Add additional error handling for emailing private links 2012-07-30 10:07:20 +07:00
Michael Gapczynski dab708b625 Correction for 'Fix group detection for sharing in case username contains '@', fix for oc-1270' 2012-07-30 10:07:20 +07:00
Michael Gapczynski 519eb39422 Remove delete tipsy if file is deleted, fixes bug oc-958 2012-07-30 10:07:19 +07:00
Michael Gapczynski 3e183b2eea Set filter to empty if not set by Ampache client
Conflicts:
	apps/media/lib_ampache.php
2012-07-30 10:07:19 +07:00
Michael Gapczynski d07b8448d1 Set the user id when authenticating user for Ampache, fixes bug oc-219 2012-07-30 10:07:19 +07:00
Michael Gapczynski 7d17c59a51 Fix group detection for sharing in case username contains '@', fix for oc-1270 2012-07-30 10:07:19 +07:00
Michael Gapczynski f378415377 Only call mkdir() if the root folder does not exist for FTP external storage 2012-07-30 10:07:19 +07:00
Michael Gapczynski f328f53ec1 Fix filesystem hash, no longer using basicOperation()
Conflicts:
	lib/filesystemview.php
2012-07-30 10:07:19 +07:00
Thomas Tanghus 01f25119d5 Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4 2012-07-30 12:28:40 +07:00
Thomas Tanghus f91783e9ab Fix errors when no addressbook. 2012-07-30 12:28:10 +07:00
Georg Ehrke d8aca0c78e apply fix suggested in oc-1132 - bugfix for oc-1132 2012-07-26 18:40:12 +07:00
Georg Ehrke 8cff0d997f convert through caldav transmitted rgba calendarcolor to rgb 2012-07-26 14:48:00 +07:00
Lukas Reschke 95936024bc Updated packages 2012-07-26 01:12:58 +07:00
Arthur Schiwon 3c9919e475 LDAP: check if php-ldap is installed. If not, give an error output. FIX: blank Users page when the module is not installed. 2012-07-25 18:21:16 +07:00
Georg Ehrke 9b0870bb91 add some calendar sharing hooks in stable4 - bugfix for oc-1325 2012-07-25 17:02:24 +07:00
Bjoern Schiessle 73734c98e0 - remove namespace from file property name (webdav)
- update script to fix broken properties in the database
2012-07-23 11:00:37 +07:00
Lukas Reschke 38271ded75 Added CSRF checks 2012-07-20 20:12:36 +07:00
Arthur Schiwon 0bd7d14b7a Sharing: offer an option to allow sharing with everyone, i.e. do not check group memberships 2012-07-17 14:09:01 +07:00
Thomas Tanghus 9326f4f535 Added hooks for postCreateUser to add default address book and calendar. Fixes oc-1265. 2012-07-17 10:45:15 +07:00
Thomas Tanghus f4a8c233cf Added hook for postCreateUser. Probably fix for oc-1265.
Conflicts:

	apps/calendar/appinfo/app.php
2012-07-17 10:35:46 +07:00
Thomas Tanghus eb2a15d58f Format birthday as BDAY;VALUE=DATE:YYYY-MM-DD. Fixes oc-1276. 2012-07-16 23:36:11 +07:00
Thomas Tanghus 47d50fc424 Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4 2012-07-16 21:22:07 +07:00
Thomas Tanghus d64300251b Corrected javascript definition. 2012-07-16 21:21:37 +07:00
Georg Ehrke d4e2cb6e62 fix encoding fail in calendar app - bugfix for oc-1194 2012-07-16 19:53:19 +07:00
Thomas Tanghus 225726c8d9 latin1 => utf8. I thought I did this a month ago? 2012-07-16 01:41:45 +07:00
Bjoern Schiessle 50eef9a71c update script to fix fscache 2012-07-13 15:17:36 +07:00
Michael Gapczynski 7b2ec41477 Revert santizing toaddress, because PHPMailer now throws exceptions
Conflicts:
	apps/files_sharing/ajax/email.php
2012-07-11 19:38:57 +07:00
Michael Gapczynski ebcf5bce3c Sanitize toaddress for emailing private links
Conflicts:
	apps/files_sharing/ajax/email.php
2012-07-11 19:38:56 +07:00
Lukas Reschke d203fa2c50 Sanitizing file names 2012-07-11 19:15:11 +07:00
Robin Appelman 7f57591ef1 suppress error when using is_dir on non directory in smb backend 2012-07-10 14:20:30 +07:00