Commit Graph

124 Commits

Author SHA1 Message Date
steinm
81c0bd8a7e - output name and login of user in lists 2012-09-11 13:00:43 +00:00
steinm
9412479354 - output name and login in all user lists 2012-09-11 12:57:13 +00:00
steinm
14755b838a - prevent xss attack
- no need to decodeString() in javascript anymore
2012-09-11 12:55:29 +00:00
steinm
52fbc5bc29 - fixed more xss security holes 2012-09-11 12:51:46 +00:00
steinm
5e11a14c42 - fixed possible xss security holes 2012-09-05 21:00:14 +00:00
steinm
f14c15ee50 - fixed security hole 2012-08-31 07:44:25 +00:00
steinm
452221fe2b - lots of fixes to prevent CSRF attacks 2012-08-29 20:37:22 +00:00
steinm
ce2843ef6e - handle new settings for password strength, expiration
- prevent some XSS attacs
2012-08-28 07:24:32 +00:00
steinm
7d4c363e5a - output password expiration 2012-08-28 07:22:25 +00:00
steinm
a9d8f415ae - prevent XSS attac 2012-08-28 07:21:56 +00:00
steinm
f4489d6a73 - some minor code formating
- added copyright notice
2012-08-28 07:21:15 +00:00
steinm
a3a42bb451 - some initial coding for auto completion 2012-08-28 07:20:41 +00:00
steinm
75c2adcfc6 - prevent XSS attacs 2012-08-28 07:18:00 +00:00
steinm
4bb7c9307f - check password strength
- allow password change only if current password is entered
2012-08-28 07:09:23 +00:00
steinm
a68a78ceab - check for password strength
- ask for current password before setting a new one
2012-08-28 07:00:19 +00:00
steinm
1b29ae6bd8 - Script for which is called when the login process detects a to old password 2012-08-28 06:37:58 +00:00
steinm
36dc571aa5 - added more configuration settings for password handling, stopwords file
and user listing
2012-08-28 06:34:21 +00:00
steinm
020165de17 - do not list groups/users for which an entry in the acl already exists 2012-05-08 08:10:08 +00:00
steinm
1e06a235da - output file converters for creation of index 2012-02-14 12:54:22 +00:00
steinm
8c6b19f38a - changed line endings from dos to unix 2012-02-13 08:29:10 +00:00
steinm
229b79edad - changed line endings from dos to unix 2012-02-13 08:28:34 +00:00
steinm
5a39bffd73 - replace more <?= by <?php 2012-02-07 10:31:31 +00:00
steinm
f3b2cbe950 - run mimetype through htmlspecialchars() 2012-01-12 17:00:31 +00:00
steinm
8e87e1cd97 - run mimetype through htmlspecialchars() 2012-01-12 16:59:35 +00:00
steinm
95c0a4deee - call htmlspecialchars() on comment 2011-12-06 12:30:18 +00:00
steinm
a731ac5ea0 - call htmlspecialchars() on email 2011-12-06 12:29:39 +00:00
steinm
4e8ba69ba8 - replace html in email address 2011-12-06 12:29:09 +00:00
steinm
2538851beb - do not decode string anymore 2011-12-05 16:45:05 +00:00
steinm
d2a4147de3 - just replace ' by \' in javascript code, do not use htmlspecialchars() 2011-12-05 16:44:09 +00:00
steinm
7c5805badb - call htmlspeciachars() before output of comment 2011-12-05 13:21:09 +00:00
steinm
73f4c8d90d - use htmlspecialchars() whenever data from the database is output
(this does currently break the output, because data was already
	encoded when saved)
2011-12-02 16:23:36 +00:00
steinm
b4d4317e89 - set unix line endings 2011-12-02 08:03:01 +00:00
steinm
9fdcd9ab1f - get rid of function sanitizeString() 2011-12-01 14:11:07 +00:00
steinm
f51a97b4b2 - run repair function for documents
- nicer output
2011-11-29 09:02:55 +00:00
steinm
3e3754c8e7 - added initial version of document/folder check 2011-11-29 07:23:20 +00:00
steinm
df5d8e3fbd - use two columns instead of 1 with colspan=2 2011-10-27 09:34:30 +00:00
steinm
c594cb334a - do not output user/group if access rights are not sufficient to add
a notification
2011-10-27 07:58:37 +00:00
steinm
77ff174228 - allow to set _enableLargeFileUpload and _enablePasswordForgotten 2011-10-25 13:38:21 +00:00
steinm
a94d45b111 - check for _enableLargeFileUpload and disable links if not set 2011-10-25 13:37:45 +00:00
steinm
9177ba39eb - check for _enableLargeFileUpload and disable links if not set 2011-10-25 13:37:26 +00:00
steinm
662b657e9d ?? 2011-10-16 20:00:26 +00:00
steinm
3106ca2a9b - ?? 2011-10-16 19:59:35 +00:00
steinm
51b92c5c0a - added scripts for password change 2011-10-12 06:29:48 +00:00
steinm
30bf179ea2 - simplyfied code 2011-10-10 14:10:51 +00:00
steinm
46350ee830 - added link back to login form 2011-10-10 08:42:24 +00:00
steinm
1582601f17 - added link to password forgotten function at and of page if enabled 2011-10-10 08:40:05 +00:00
steinm
eb8254e9bc - used translated phrases 2011-10-10 07:35:58 +00:00
steinm
e869ebe2ef - scripts for sending forgotten password 2011-10-07 16:22:05 +00:00
steinm
a590083015 - allow managers of a group to manage their group 2011-10-07 16:18:23 +00:00
steinm
3cab08702d - check if configuration file is writeable and issue a message if not 2011-07-27 06:23:17 +00:00