wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
server/lib/private
History
Lukas Reschke 5588c5f262 Delete cookie instead of emptying value 
PHP will handle session cookies with an empty values as an E_WARNING error. ([php/#68063](https://bugs.php.net/bug.php?id=68063))

ownCloud sets the cookie to an empty value in case the session expires, it however after this starts a new session. Due to potential race conditions this can in unlikely cases lead to the fact that the session never gets restarted and the user is left with an empty cookie. PHP tries then to use the empty cookie which makes the instance not usable.

To work around any race condition we now tell PHP to explicitly delete the value which can be done by using `null` as value, PHP will then send a cookie with the value "deleted". Also theepiration has been set to -1.
2015-10-19 19:54:12 +02:00
..
activity update licence headers via script 2015-10-05 21:15:52 +02:00
app Merge pull request #19731 from owncloud/update-list-of-deprecated-methods 2015-10-14 16:34:55 +02:00
appframework fix IE8 user agent detection 2015-10-09 11:19:06 +02:00
archive Update license headers 2015-03-26 11:44:36 +01:00
backgroundjob deduplicate @xenopathic 2015-10-06 09:52:19 +02:00
cache update licence headers via script 2015-10-05 21:15:52 +02:00
command Merge pull request #15129 from owncloud/version-command-bus 2015-03-26 19:55:13 +01:00
console adding occ upgrade text note 2015-10-14 12:16:17 +02:00
contacts Update license headers 2015-03-26 11:44:36 +01:00
db update licence headers via script 2015-10-05 21:15:52 +02:00
diagnostics Update license headers 2015-03-26 11:44:36 +01:00
encryption update licence headers via script 2015-10-05 21:15:52 +02:00
files Remove $ETagFunction - it was never used 2015-10-16 13:17:12 +02:00
group update license headers and authors 2015-06-25 14:13:49 +02:00
hooks update license headers and authors 2015-06-25 14:13:49 +02:00
http/client update licence headers via script 2015-10-05 21:15:52 +02:00
l10n update licence headers via script 2015-10-05 21:15:52 +02:00
legacy Remove OC_Appconfig 2015-07-03 18:00:16 +02:00
lock Catch "missing table" exception when cleaning up locks 2015-10-08 11:37:51 +02:00
log update licence headers via script 2015-10-05 21:15:52 +02:00
mail Setup sendmail transport 2015-10-08 16:48:18 +02:00
memcache deduplicate @xenopathic 2015-10-06 09:52:19 +02:00
notification Allow checking whether there are notifiers registered 2015-09-17 11:08:17 +02:00
ocs update licence headers via script 2015-10-05 21:15:52 +02:00
preview deduplicate @xenopathic 2015-10-06 09:52:19 +02:00
route deduplicate @xenopathic 2015-10-06 09:52:19 +02:00
search Scrutinizer Auto-Fixes 2015-05-19 11:23:06 +00:00
security update licence headers via script 2015-10-05 21:15:52 +02:00
session Delete cookie instead of emptying value 2015-10-19 19:54:12 +02:00
setup update licence headers via script 2015-10-05 21:15:52 +02:00
share Check for error when resharing 2015-10-16 20:43:17 +02:00
tagging Update license headers 2015-03-26 11:44:36 +01:00
template update license headers and authors 2015-06-25 14:13:49 +02:00
user Make sure that remote shares use the correct uid casing 2015-10-06 15:16:19 +02:00
activitymanager.php update licence headers via script 2015-10-05 21:15:52 +02:00
allconfig.php Move the filtering of sensitive data to the config class 2015-09-25 11:08:33 +02:00
api.php Strip directory from scriptName 2015-10-12 23:39:16 +02:00
app.php deduplicate @xenopathic 2015-10-06 09:52:19 +02:00
appconfig.php update licence headers via script 2015-10-05 21:15:52 +02:00
apphelper.php update license headers and authors 2015-06-25 14:13:49 +02:00
archive.php Update license headers 2015-03-26 11:44:36 +01:00
avatar.php update license headers and authors 2015-06-25 14:13:49 +02:00
avatarmanager.php update license headers and authors 2015-06-25 14:13:49 +02:00
capabilitiesmanager.php Use DI 2015-08-10 10:45:16 +02:00
config.php Remove DEBUG constant and use config value 2015-08-24 15:14:05 +02:00
contactsmanager.php Update license headers 2015-03-26 11:44:36 +01:00
databaseexception.php Update license headers 2015-03-26 11:44:36 +01:00
databasesetupexception.php Update license headers 2015-03-26 11:44:36 +01:00
datetimeformatter.php Update license headers 2015-03-26 11:44:36 +01:00
datetimezone.php When guessing the timezone, the offset might only be valid on a given timestamp 2015-04-07 10:13:06 +02:00
db.php Remove remainings of mssql 2015-07-29 18:19:31 +02:00
defaults.php Revert "make knowledge base url configurable" 2015-08-11 14:20:25 +02:00
eventsource.php update licence headers via script 2015-10-05 21:15:52 +02:00
filechunking.php work directly on storages when doing a chunked upload assembly 2015-09-14 20:35:33 +02:00
files.php The full name has to be tested if it's a dir - fixes #19854 2015-10-19 10:07:33 +02:00
forbiddenexception.php Update license headers 2015-03-26 11:44:36 +01:00
group.php Add remark that $run is not supported anymore 2015-10-02 23:19:26 +02:00
helper.php update licence headers via script 2015-10-05 21:15:52 +02:00
hintexception.php Update license headers 2015-03-26 11:44:36 +01:00
hook.php Remove OC_Log 2015-07-03 18:00:16 +02:00
httphelper.php Add connection timeout to default POST options 2015-05-26 11:22:50 +02:00
image.php Make sure we have a resource before measuring its size 2015-06-08 15:10:29 +02:00
installer.php an-app-is-identified-by-having-a-info.xml-app.php-should-not-be-mandatory 2015-10-16 17:25:22 +02:00
json.php Encode HTML tags in JSON 2015-09-03 00:44:46 +02:00
l10n.php update licence headers via script 2015-10-05 21:15:52 +02:00
largefilehelper.php Update license headers 2015-03-26 11:44:36 +01:00
log.php update licence headers via script 2015-10-05 21:15:52 +02:00
naturalsort.php update licence headers via script 2015-10-05 21:15:52 +02:00
naturalsort_defaultcollator.php Update license headers 2015-03-26 11:44:36 +01:00
navigationmanager.php Update license headers 2015-03-26 11:44:36 +01:00
needsupdateexception.php Update license headers 2015-03-26 11:44:36 +01:00
notsquareexception.php Update license headers 2015-03-26 11:44:36 +01:00
ocs.php update licence headers via script 2015-10-05 21:15:52 +02:00
ocsclient.php Disable app store for EE by default 2015-10-08 14:52:52 +02:00
preview.php Add tests 2015-10-01 13:17:22 +02:00
previewmanager.php update license headers and authors 2015-06-25 14:13:49 +02:00
repair.php Repair step to remove bogus expiration dates from non-link shares 2015-10-01 08:27:12 +02:00
repairexception.php Update license headers 2015-03-26 11:44:36 +01:00
repairstep.php update license headers and authors 2015-06-25 14:13:49 +02:00
response.php Add blob: scheme to default CSP policy 2015-09-29 14:27:35 +02:00
search.php Update license headers 2015-03-26 11:44:36 +01:00
server.php deduplicate @xenopathic 2015-10-06 09:52:19 +02:00
servernotavailableexception.php update license headers and authors 2015-06-25 14:13:49 +02:00
serviceunavailableexception.php Update license headers 2015-03-26 11:44:36 +01:00
setup.php Check for PDO instead of removed function for PHP 7 compatibility 2015-07-30 12:32:22 +02:00
streamer.php Only use zip64 when we have 64 bit php 2015-10-08 09:13:08 +02:00
subadmin.php Remove unused variables 2015-04-18 16:35:19 +02:00
systemconfig.php Deduplicate constant 2015-09-25 13:17:23 +02:00
tagmanager.php Update license headers 2015-03-26 11:44:36 +01:00
tags.php Fix undefined variable $tagId 2015-05-04 16:19:26 +02:00
template.php Merge pull request #19537 from owncloud/fix-white-page-of-death 2015-10-07 14:55:11 +02:00
templatelayout.php Always pass in ILogger 2015-10-09 14:08:22 +02:00
tempmanager.php deduplicate @xenopathic 2015-10-06 09:52:19 +02:00
updater.php Always pass in ILogger 2015-10-09 14:08:22 +02:00
urlgenerator.php Fix UrlGenerator::imagePath() for app paths 2015-04-03 23:42:18 +01:00
user.php Add remark that $run is not supported anymore 2015-10-02 23:19:26 +02:00
util.php update deprecation message 2015-10-14 14:08:45 +02:00