Commit Graph

1219 Commits (4b86c43f9714f2fee6a2030f22a4a314b538bf9e)

Author SHA1 Message Date
Robin Appelman 4b86c43f97 check for filename blacklist in OC_Filesystem::isValidPath 2012-11-03 00:23:48 +07:00
Robin Appelman 6540c0fc63 fix OC_Filesystem::isValidPath when using \ instead of / in paths 2012-11-02 20:15:00 +07:00
Lukas Reschke c73eb29b6e Backport of ad720c4 for oC 4.x
Fixes #145
2012-10-30 13:50:42 +07:00
Victor Dubiniuk 6244d68b6a Fix 'App already installed' for app with entry in DB and no files 2012-10-18 23:10:33 +07:00
Lukas Reschke ecbf9ff90a "deny from all" instead directory 2012-10-16 15:58:59 +07:00
Lukas Reschke 4a1f1a49a0 Show a warning in the installer if .htaccess is not working 2012-10-16 15:58:57 +07:00
Lukas Reschke 6c22983f62 Set oc_token to httponly 2012-10-16 13:58:17 +07:00
Lukas Reschke 3ca5c71a0b Use /dev/urandom instead of /dev/random
The usage of /dev/urandom is enough secure
2012-10-15 19:23:37 +07:00
Lukas Reschke 7f06f93e9e Show a warning in the installer if no secure RNG is available 2012-10-14 17:17:06 +07:00
Lukas Reschke e99cf5cf49 Fallback to /dev/random if openssl_random_pseudo_bytes not available 2012-10-14 16:16:20 +07:00
Frank Karlitschek 033ac60208 4.0.8 2012-10-09 17:07:10 +07:00
Arthur Schiwon d8e0be18c8 destroy invalid sessions 2012-10-08 13:53:08 +07:00
Lukas Reschke 375eae1a5c Use openssl_random_pseudo_bytes if available
This is a backport of ef57e92 /cc @DeepDiver1975
2012-10-06 14:19:58 +07:00
Thomas Tanghus ca216b5296 Trim trailing whitespace from version. 2012-09-26 11:33:14 +07:00
Lukas Reschke 292d20595d Passwords containing a ":" don't work with this explode
Thanks to mETz
2012-09-25 19:49:42 +07:00
Lukas Reschke 1e7ac8ba15 Sanitize user input 2012-09-22 10:55:25 +07:00
Tom Needham 1954f80fa3 Don't store users password hash when exporting. 2012-09-19 16:19:47 +07:00
Tom Needham a5c42edbe5 Only try to delete migration.db if it was created. 2012-09-18 16:31:27 +07:00
Tom Needham 3b465f419a Allow exporting of users from any user backend, fixed oc-1645 2012-09-18 16:30:13 +07:00
Niko Ehrenfeuchter ae3ea39a4c fix message about 'apps' directory 2012-09-10 19:06:03 +07:00
Niko Ehrenfeuchter 76ccd69cec mark unused variables 2012-09-10 16:04:05 +07:00
Niko Ehrenfeuchter 88d95823b2 fix typos 2012-09-10 16:04:03 +07:00
Niko Ehrenfeuchter ac4364040d fix typos + copy-paste errors in comments 2012-09-10 16:03:46 +07:00
Frank Karlitschek 526e704c9f 4.0.7
and remove some ^M while at it
2012-08-14 20:07:58 +07:00
Michael Gapczynski 95ef80e6db Check blacklist when renaming files 2012-08-13 01:29:32 +07:00
Lukas Reschke 4fd069b479 Also check some other files 2012-08-13 01:26:28 +07:00
Jakob Sack 6d94455540 Fix OC_Connector_Sabre_Locks for SQLite 2012-08-12 09:06:46 +07:00
Bjoern Schiessle 2cfc7f7454 fix for bug 879 - add parent directory to file cache if it does not exist yet.
For example this can happen if the sync client is used before the user created the root directory (e.g. through web login).
2012-08-08 11:47:23 +07:00
Frank Karlitschek aa60771736 4.0.6 2012-07-31 10:13:10 +07:00
Michael Gapczynski b9bd54bd98 Add additional error handling for emailing private links 2012-07-30 10:07:20 +07:00
Michael Gapczynski 6b83470c96 Fix incorrect copy/paste for file_put_contents() 2012-07-30 10:07:19 +07:00
Michael Gapczynski 93c75f46e5 Forgot data parameter for file_put_contents() streams pre proxies 2012-07-30 10:07:19 +07:00
Michael Gapczynski ea18d70c60 Run pre and post proxies for file_put_contents() streams
Conflicts:
	lib/filesystemview.php
2012-07-30 10:07:19 +07:00
Michael Gapczynski f328f53ec1 Fix filesystem hash, no longer using basicOperation()
Conflicts:
	lib/filesystemview.php
2012-07-30 10:07:19 +07:00
Michael Gapczynski 099b16350f Delete old session files, suggested by Torben Nehmer, see bug oc-736 2012-07-30 10:07:19 +07:00
Michael Gapczynski 89027545a0 Check if user is already logged in for DAV auth, instead of logging in and creating new sessions for every request 2012-07-30 10:07:18 +07:00
Georg Ehrke 4e62e121a6 mark OCP\App::register as deprecated 2012-07-26 15:12:57 +07:00
Bjoern Schiessle 73734c98e0 - remove namespace from file property name (webdav)
- update script to fix broken properties in the database
2012-07-23 11:00:37 +07:00
Robin Appelman e52ab59b40 Revert "use readfile() instead iof fopen() for file download over webdav."
This reverts commit 9af74a9c80.
2012-07-19 18:13:10 +07:00
Frank Karlitschek 10bf36a6ae 4.0.5 2012-07-19 09:10:18 +07:00
Bjoern Schiessle 80ed5412f1 if the '/Shared' was the modified directory, than scan it. 2012-07-13 11:57:14 +07:00
Michael Gapczynski 632fc6ec61 Fix log write() parameters in wrong order 2012-07-11 19:38:57 +07:00
Lukas Reschke ac5abc5603 Handling exceptions 2012-07-11 19:38:57 +07:00
Michael Gapczynski e887fd7ba8 Catch exceptions from PHPMailer 2012-07-11 19:38:57 +07:00
Michael Gapczynski 71491612e3 Move line counter so we only count lines towards the offset that are equal or above the log level 2012-07-11 19:38:56 +07:00
Michael Gapczynski bc3462f022 Improvements and bug fix for log reading, fixes bug oc-982 2012-07-11 19:38:56 +07:00
Bjoern Schiessle 9af74a9c80 use readfile() instead iof fopen() for file download over webdav.
fopen() didn't work for large files on some servers while readfile()
seems to work for all files on all configurations.
2012-07-11 12:04:20 +07:00
Robin Appelman b470869114 when checking for updates in the filecache, explicitly state that we are querying a folder 2012-07-10 14:42:15 +07:00
Lukas Reschke 0465129eba Remove the forced download§ 2012-07-02 12:19:48 +07:00
Lukas Reschke 47bad20132 Restoring stable4... 2012-07-02 10:47:45 +07:00