server/lib/private/legacy
Lukas Reschke 32bf8ec826
Don't use cached informations for app version
When installing an app from the appstore the `\OC_App::getAppVersion` code is triggered twice:

- First when the downloader tries to compare the current version to the new version on the appstore to check if there is a newer version. This protects against downgrade attacks and is implemented in `\OC\Installer::downloadApp`.
- Second, when the app is actually installed the current version is written to the database. (`\OC\Installer::installApp`)

This fails however when the version is actually cached. Because in step 1 the cached version will be set to "0" and then be reused in the second step.

While this is probably not the cleanest version I assume this is an approach that is least invasive. Feedback and suggestions welcome :)

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-12-09 18:01:45 +01:00
..
db Update with robin 2016-07-21 18:13:58 +02:00
group Update with robin 2016-07-21 18:13:58 +02:00
l10n Fix more tests 2016-10-28 22:16:28 +02:00
ocs Remove unused private classes 2016-08-18 09:37:11 +02:00
template Fix preview URLs 2016-11-08 16:39:13 +01:00
user Fix others 2016-07-21 18:13:57 +02:00
api.php prevent infinite redirect loops if the there is no 2fa provider to pass 2016-08-24 10:49:23 +02:00
app.php Don't use cached informations for app version 2016-12-09 18:01:45 +01:00
db.php Kill update simulation 2016-09-27 18:43:53 +02:00
defaults.php Cahnge URL for desktop clients directly to pop-up 2016-12-08 12:40:52 +01:00
eventsource.php Update with robin 2016-07-21 18:13:58 +02:00
filechunking.php Update with robin 2016-07-21 18:13:58 +02:00
files.php Keep the filemtime for files when downloading them in a zip/tar 2016-11-28 11:36:10 +01:00
group.php Update with robin 2016-07-21 18:13:58 +02:00
helper.php Remove checks whether OC is running on Windows pt. 2 2016-10-24 16:12:17 +02:00
hook.php Update with robin 2016-07-21 18:13:58 +02:00
image.php Fix avatar on exif rotated images 2016-10-26 21:37:11 +02:00
json.php prevent infinite redirect loops if the there is no 2fa provider to pass 2016-08-24 10:49:23 +02:00
ocs.php Return 404 on v2.php when the app is disabled 2016-09-22 12:18:40 +02:00
response.php Add nonce also to legacy CSP 2016-10-26 09:41:18 +02:00
template.php Add jquery ui fixes js file 2016-11-25 16:44:51 +01:00
user.php bring back remember-me 2016-11-02 13:39:16 +01:00
util.php Properly check the data dir 2016-12-05 23:35:35 +01:00