- Dec 01, 2015
-
-
Lukas Reschke authored
This changeset allows ownCloud to run with pretty URLs, they will be used if mod_rewrite and mod_env are available. This means basically that the `index.php` in the URL is not shown to the user anymore. Also the not deprecated functions to generate URLs have been modified to support this behaviour, old functions such as `filePath` will still behave as before for compatibility reasons. Examples: http://localhost/owncloud/index.php/s/AIDyKbxiRZWAAjP => http://localhost/owncloud/s/AIDyKbxiRZWAAjP http://localhost/owncloud/index.php/apps/files/ => http://localhost/owncloud/apps/files/ Due to the way our CSS and JS is structured the .htaccess uses some hacks for the final result but could be worse... And I was just annoyed by all that users crying for the removal of `index.php` ;-)
-
- Oct 30, 2015
-
-
Lukas Reschke authored
For enhanced security it is recommended to configure Redis to only accept connections with a password. (http://redis.io/topics/security) This is especially critical since Redis supports the LUA scripting language and thus a simple SSRF vulnerability (as proven in http://benmmurphy.github.io/blog/2015/06/04/redis-eval-lua-sandbox-escape/ for example) may lead to a remote code execution.
-
- Oct 27, 2015
-
-
Morris Jobke authored
This reverts commit 7cbdd9b9.
-
- Oct 23, 2015
-
-
Steffen Lindner authored
-
- Oct 13, 2015
-
-
RealRancor authored
-
- Oct 05, 2015
-
-
Lukas Reschke authored
-
- Oct 01, 2015
-
-
Morris Jobke authored
* if you install owncloud via package it is not possible to skip migration tests * this also allows to disable migration tests for an instance by default
-
- Sep 30, 2015
-
-
Carla Schroder authored
-
- Sep 29, 2015
-
-
RealRancor authored
-
- Sep 25, 2015
-
-
Morris Jobke authored
* ref #16891
-
- Sep 23, 2015
-
-
Carla Schroder authored
-
- Sep 21, 2015
-
-
Phil Davis authored
that I noticed while looking at some code.
-
- Sep 15, 2015
-
-
Carla Schroder authored
-
Victor Dubiniuk authored
-
Victor Dubiniuk authored
-
Victor Dubiniuk authored
-
- Sep 06, 2015
-
-
Robin McCorkell authored
-
- Sep 02, 2015
-
-
Robin Appelman authored
-
- Aug 24, 2015
-
-
Morris Jobke authored
* introduces config.php option 'debug' that defaults to false * migrate DEBUG constant to config value
-
- Aug 19, 2015
-
-
Robin McCorkell authored
-
- Aug 17, 2015
-
-
Carla Schroder authored
-
- Aug 10, 2015
-
-
Robin McCorkell authored
-
Victor Dubiniuk authored
-
- Jul 29, 2015
-
-
Vincent Petry authored
This will prevent detecting remote changes done in the data folder / root storage by default. In the rare cases where the data folder is shared with other apps/users outside ownCloud and change detection is needed, the admin will have to set the option explicitly from now on. Note that this doesn't affect external storages which have their own setting in the mount options.
-
- Jul 07, 2015
-
-
Morris Jobke authored
-
Morris Jobke authored
-
- Jul 06, 2015
-
-
Morris Jobke authored
-
Morris Jobke authored
-
- Jun 26, 2015
-
-
Vincent Petry authored
-
- Jun 19, 2015
-
-
Morris Jobke authored
-
- Jun 17, 2015
-
-
Lukas Reschke authored
-
Carla Schroder authored
-
- Jun 02, 2015
-
-
Lukas Reschke authored
-
- Jun 01, 2015
-
-
Robin Appelman authored
-
Vincent Petry authored
-
- May 28, 2015
-
-
Carla Schroder authored
-
- May 08, 2015
-
-
Morris Jobke authored
* Log condition for log level increase based on conditions. Once one of these conditions is met, the required log level is set to debug. This allows to debug specific requests, users or apps * Supported conditions (setting `log_condition` in `config.php`): - `shared_secret`: if a request parameter with the name `log_secret` is set to this value the condition is met - `users`: if the current request is done by one of the specified users, this condition is met - `apps`: if the log message is invoked by one of the specified apps, this condition is met * fix unit test and add app log condition test
-
- Apr 20, 2015
-
-
Lukas Reschke authored
-
Lukas Reschke authored
-
Lukas Reschke authored
This Pull Request introduces a SabreDAV plugin that will block all older clients than 1.6.1 to connect and sync with the ownCloud instance. This has multiple reasons: 1. Old ownCloud client versions before 1.6.0 are not properly working with sticky cookies for load balancers and thus generating sessions en masse 2. Old ownCloud client versions tend to be horrible buggy In some cases we had in 80minutes about 10'000 sessions created by a single user. While this change set does not really "fix" the problem as 3rdparty legacy clients are affected as well, it is a good work-around and hopefully should force users to update their client
-