Commit graph

4510 commits

Author SHA1 Message Date
Arthur Schiwon
454f81fb15 load authentication apps before checking wether user exists. fixes oc-910 2012-06-04 21:31:35 +02:00
Arthur Schiwon
773f3cf973 make it possible to load apps seperately. needed to fix oc-910 without breaking oc-863 2012-06-04 21:30:58 +02:00
Tom Needham
daa4d2cd84 Validate email on save 2012-06-04 18:44:55 +00:00
Robin Appelman
b117a1e3ec update file paths in filecache when the parent is renamed 2012-06-04 18:12:25 +02:00
Bjoern Schiessle
4bc88ef59d prevent xss attacks by manipulating image file names 2012-06-04 18:11:17 +02:00
Bjoern Schiessle
d5566d0267 prevent xss attacks by manipulating text file names 2012-06-04 18:11:08 +02:00
Bjoern Schiessle
ca64a4080f don't allow user to delete Shared dir via webdav and sync client (bug #774) 2012-06-04 18:08:51 +02:00
Bjoern Schiessle
7fbe306990 no move (rename) operation for "Shared" directory 2012-06-04 14:00:35 +02:00
Bjoern Schiessle
c8f670dfab Don't allow user to delete, rename and re-share the "Shared" directory 2012-06-04 14:00:35 +02:00
Arthur Schiwon
8983c6dd6b commited a bit too much before 2012-06-04 13:27:55 +02:00
Thomas Tanghus
d657263403 Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4 2012-06-04 13:13:53 +02:00
Thomas Tanghus
74ac2ac63a Contacts: When editing photo on a newly created contact the name in the contact list was cleared. 2012-06-04 13:13:43 +02:00
Arthur Schiwon
8554525ebe Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4 2012-06-04 13:04:37 +02:00
Arthur Schiwon
b48228ae3d LDAP: link to documentation on settings page 2012-06-04 13:04:18 +02:00
Frank Karlitschek
64fe06710a add deprecated warning 2012-06-04 12:49:33 +02:00
Frank Karlitschek
300f6894e0 4.0.1 2012-06-03 21:06:07 +02:00
Michael Gapczynski
0145c65bf3 Verify user exists when checking if logged in, fix for bug oc-863 2012-06-02 20:09:44 -04:00
Michael Gapczynski
4db5481ad5 Improve efficiency of retrieving log file entries 2012-06-01 14:42:14 -04:00
Frank Karlitschek
52b3305892 add a pdo check 2012-06-01 20:01:23 +02:00
Frank Karlitschek
3ef944521e add check if apps folder is writable. needed to install 3rd party apps 2012-06-01 19:52:45 +02:00
Frank Karlitschek
60b8e172d5 prevent a division by zero problem 2012-06-01 16:49:14 +02:00
Frank Karlitschek
2c97f4788b Merge branch 'stable4' of gitorious.org:owncloud/owncloud into stable4 2012-06-01 16:34:52 +02:00
Frank Karlitschek
aa9824d35b fix proper error reporting 2012-06-01 16:33:24 +02:00
Arthur Schiwon
34464b1f8b LDAP group backend: Set configured true when it is... fixe oc-887 2012-06-01 16:02:04 +02:00
Frank Karlitschek
aa88ec81c7 sort users and groups. fixes oc-779 2012-06-01 14:21:24 +02:00
Arthur Schiwon
86279bc192 LDAP group backend: If a group filter is not configured, do not do anything. Fixes oc-867 2012-06-01 14:05:08 +02:00
Frank Karlitschek
0468f53f73 switch magic quotes off.
they are evil and deprecated
2012-06-01 12:42:50 +02:00
Frank Karlitschek
1b34bda76b fix oc-874 2012-06-01 12:16:04 +02:00
Frank Karlitschek
e44f9ab46e correctly detect https 2012-06-01 11:47:14 +02:00
Frank Karlitschek
8ed13e627e don´t do warnings.
Not sure if this start_session call is really needed here.
2012-06-01 11:08:40 +02:00
Frank Karlitschek
0d2d613f59 added a serverProtocol function that correctly returns the used protocol even if the ssl connection is terminated at a reverse_proxy or at a load balancer 2012-06-01 11:06:49 +02:00
Frank Karlitschek
670022cc8a fix the breadcrumb 2012-05-31 21:43:07 +02:00
Frank Karlitschek
3a6341c880 fix oc-780 2012-05-31 21:27:46 +02:00
Frank Karlitschek
c3ccdbaa79 more fixes 2012-05-31 21:14:46 +02:00
Frank Karlitschek
d56966f14f someone broke this completely. Hope it works again. Please check your apache error log and turn php notices on if you work on ajax call 2012-05-31 20:45:39 +02:00
Frank Karlitschek
739c5488a5 Merge branch 'stable4' of gitorious.org:owncloud/owncloud into stable4 2012-05-31 20:17:30 +02:00
Frank Karlitschek
5d425a9f79 use our own serverHost call so that ownCloud works with reverse proxy servers 2012-05-31 20:16:44 +02:00
Georg Ehrke
0059535140 fix potential XSS 2012-05-31 20:03:15 +02:00
Arthur Schiwon
7ec3e37199 LDAP: make queries compatible also with PostgreSQL 2012-05-31 13:06:27 +02:00
Robin Appelman
f4577bf00c fix for pgsql database migration 2012-05-31 00:01:03 +02:00
Arthur Schiwon
449b9b92f0 LDAP: fix wrong value for input type 2012-05-30 22:37:00 +02:00
Arthur Schiwon
93849916bb LDAP: support for 'member' as group-member-association 2012-05-30 22:36:48 +02:00
Frank Karlitschek
4dc7ed139b don´t hardcode /tmp 2012-05-30 14:18:47 +02:00
Frank Karlitschek
c1f7d320e8 mark as 4.0.1 pre 2012-05-29 22:18:07 +02:00
Michael Gapczynski
1d983c28aa Restrict requested app to apps directory 2012-05-29 12:35:52 -04:00
Thomas Tanghus
6515c5c1e7 Contacts: NOTE wasn't saved properly. 2012-05-29 16:45:52 +02:00
Georg Ehrke
1c1ed52867 fix status
of timezone detection
2012-05-29 13:14:36 +02:00
Brice Maron
d1f0261b5d Correct typo in last_insert_id for calendar and pg fix #oc-731 2012-05-28 20:57:52 +00:00
Brice Maron
2f8412defc Set table prefix if not set in postgresql install 2012-05-28 20:56:21 +00:00
Thomas Tanghus
cf113409ad Contacts: Fix XSS. 2012-05-28 14:41:48 +02:00