Bjoern Schiessle
089ae980c4
use new sanitize HTML function
14 years ago
Bart Visscher
79f9d61ec8
Allow apps to load before login, needed for user_openid
14 years ago
Bjoern Schiessle
3ddaedee3b
fixed xss vulnerability
14 years ago
Lukas Reschke
2b22c538c8
Make some apps compatible
14 years ago
Thomas Tanghus
4f6978c30f
Redirect HTTP Auth requests to REQUEST_URI. Partial fix for http://bugs.owncloud.org/thebuggenie/owncloud/issues/oc-874
14 years ago
Robin Appelman
ba1dec64c1
load all apps when loging in, needed for apps listening to login hooks
14 years ago
Robin Appelman
ec55eaef5b
dont load apps when displaying the login page
and only load authentication apps during login
14 years ago
Frank Karlitschek
a945fa10a6
update copyright
14 years ago
Michael Gapczynski
90cbc32c77
Fix redirect after login, prevent open redirects
14 years ago
Michiel de Jong
1a874b4c56
make redirect safe by restricting it to current host
14 years ago
Michiel de Jong
9b5e8a2c63
fix redirect to desired page after login
14 years ago
Georg Ehrke
b35c6b57a9
allow loading of css files even if a user isn't logged in
14 years ago
Georg Ehrke
232788396d
some changes for login
14 years ago
Michael Gapczynski
051442bc76
Sanitize redirect urls
14 years ago
Bart Visscher
4dbc2093c6
Create a function for linking to remote.php
14 years ago
Georg Ehrke
e33b12a375
fix path of webdav
14 years ago
Frank Karlitschek
d2b0de614e
fix an XSS bug
14 years ago
Georg Ehrke
da03d05700
create folder 'remote' for the remote services like caldav, carddav and webdav
14 years ago
Georg Ehrke
657d02371c
fix login
14 years ago
Frank Karlitschek
74b5e22a68
some more csrf fixes
14 years ago
Georg Ehrke
3f64eb25ab
some fixes fore movable apps
14 years ago
Georg Ehrke
2e85313701
optimize code
14 years ago
Georg Ehrke
85019887df
add loading of files
14 years ago
Georg Ehrke
3e0e6e35f4
open app thru index.php
14 years ago
Arthur Schiwon
30d524b426
load apps before logout so that logout-hook works
14 years ago
Bart Visscher
f47444e1f7
Use separate function to make absolute urls
14 years ago
Robin Appelman
a862fec9a3
make remember login token also dependent on password to protect against some brute force attacks on this token
14 years ago
Thomas Olsen
21d613cbc6
Added export.php for contacts app. Works the same way as the one in the calendar app, except there is no UI for it.
Fixed indentation in /index.php
14 years ago
Robin Appelman
b0127e3918
use OC_Log instead of error_log
14 years ago
Patrick Stricker
2cc5f5e19e
made work with http authentication kind of sso login
14 years ago
Thomas Schmidt
e710bcb6d3
add owncloud autosetup option
14 years ago
Marvin Thomas Rabe
4bcb6f5346
remeber cookie bug fixed
14 years ago
Marvin Thomas Rabe
33f24a42b8
redirect url fixed
14 years ago
Marvin Thomas Rabe
6d8985ceb2
added infield labels. readded fade in of login button. updated label on install page.
14 years ago
Marvin Thomas Rabe
481a37fcf3
Show database only in advanced
14 years ago
Marvin Thomas Rabe
c943f48547
fixed link to password recovery. removed duplicated and unused code out of index.php.
14 years ago
Marvin Thomas Rabe
ccfa2dd24c
Error when only oc_remember_login cookie set fixed.
Filled username field when oc_username is set repaired.
Problems with "advanced settings" button in installation wizard fixed.
CSS improved - login and installation now looks more clean.
Request password link removed (email feature not implemented yet).
Database radio button bugs removed.
It is possible to have an empty database password, now ownCloud will support this "security issue".
Ignore Mac OS X ".DSstore" files.
Fade in/out of login button and remember checkbox removed due to some display errors.
14 years ago
Frank Karlitschek
bf3248bee9
remove warning by check cookie before accessing it.
14 years ago
Bart Visscher
950d4e1da4
Move lostpassword code to own app
14 years ago
Bart Visscher
aae6881494
Move display of login page to function in OC_Util
14 years ago
Robin Appelman
3bccebacbc
prevent people from triggering the setup manually
14 years ago
Florian Pritz
8648e3c43c
only call error_log() if DEBUG is true
Signed-off-by: Florian Pritz <bluewind@xinu.at>
14 years ago
Bart Visscher
e990ef3542
Move some common code to OC_Util
Created the following function:
- checkLoggedIn
- checkAdminUser
- redirectToDefaultPage
14 years ago
Bart Visscher
8966ed5a00
Cleanup lib/base.php
14 years ago
Bart Visscher
82c7598861
Remove global vars and use the OC static version.
Removed global vars are DOCUMENTROOT, SERVERROOT, SUBURI, WEBROOT and CONFIG_DATADIRECTORY
14 years ago
Bartek Przybylski
94696ea7de
remember changed not to store password in cookie
14 years ago
Bartek Przybylski
68e7666293
Changed behaviour of remember checkbox
14 years ago
Michael Gapczynski
1c955606a1
Initial work on resetting forgotten passwords. It works, but still need to email a token to allow reset
14 years ago
Frank Karlitschek
9ac084d0b8
remove for now. main repository is at projects.kde.org/owncloud
14 years ago
Serge Martin
7c254dd94d
Exit after call to setup
14 years ago