Commit Graph

91 Commits

Author SHA1 Message Date
Kienan Stewart b4062026d9 Allow the help_baseurl to be configured via interface variables 2023-09-29 10:54:01 +02:00
Kienan Stewart da50b32d61 Add variable to control if DNS is enabled for free domains 2023-09-29 10:43:10 +02:00
Benjamin Sonntag 2ad744ecc7 [fix] replacing /var/run by /run everywhere we can (not everywhere: postfix chroot or old compatibility is maintained 2018-07-04 17:42:42 +02:00
Benjamin Sonntag f1026cb26e [enh] removing jquery ui (now a package) + fixing head.php, simpler unless you use bro_editor 2018-06-24 16:49:43 +02:00
Benjamin Sonntag 5b7622ce90 [cosm] many cosmetic comment fixes, + ensure license and copyright everywhere 2017-10-08 19:31:34 +02:00
Benjamin Sonntag 8ba0fbf88c [fix] error message not appearing in main.php (in case of CSRF failure) 2017-10-07 17:49:19 +02:00
Benjamin Sonntag 3de55aca37 [cosm] reindent, check language of comments, ensure /** phpdoc style comments, simplify file header (license only) etc. 2017-10-06 23:42:39 +02:00
quenenni ff154144e5 fonctions + local + db 2017-08-15 03:39:37 +02:00
kent1 5421c05aae Error on isset for X_FORWARDED_PROTO
Should be `isset($_SERVER["HTTP_X_FORWARDED_PROTO"])` and not `!isset($_SERVER["HTTP_X_FORWARDED_PROTO"])`

Avoid a notice : 

`PHP Notice:  Undefined index: HTTP_X_FORWARDED_PROTO in /usr/share/alternc/panel/class/config.php on line 170`
2017-08-06 23:31:22 +02:00
Benjamin Sonntag 6d72cc522b adding x-forwarded-proto = https management to detet https too 2017-06-07 14:31:30 +02:00
Benjamin Sonntag 5ef516e0ba Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1 2016-08-09 16:44:34 +02:00
Benjamin Sonntag 16bd8278a4 [fix] allow HTTPS on any panel (you'd better use letsencrypt then, but that's a valid choice. Fixes #106 2016-08-09 16:44:30 +02:00
Alban Crommer 04c36baa77 Update config.php
See Issue #106

AlternC should allow HTTPS panel access for different host names
2016-07-13 12:19:33 +02:00
Benjamin Sonntag b205d6bf8a [wip] CSRF check should work better now... 2016-05-23 13:59:16 +02:00
Benjamin Sonntag 23a438de99 [wip] csrf check: moving the check to the right place: before authentication 2016-05-23 08:33:32 +02:00
Benjamin Sonntag de5837750e same random system everywhere : mt_rand() 2016-05-22 17:40:57 +02:00
Benjamin Sonntag 6043e9c3d7 [wip] securing *all* forms through CSRF management (requires a new table) 2016-05-20 14:21:47 +02:00
Benjamin Sonntag 06076b6fe0 moving https check down to AFTER hook/err initialization 2016-05-18 15:04:19 +02:00
Emmanuel Monbroussou bc5c8f7e34 Merge branch 'pdo_migration' into 20160515-secu
Conflicts:
	bureau/class/config.php
	bureau/class/db_mysql.php
	bureau/class/m_action.php
	bureau/class/m_variables.php
2016-05-17 15:10:37 +02:00
Remi 28f09e31e1 More explicit message for sql names length limit 2016-04-28 12:54:53 +02:00
root b28b73e913 issue #75: defines length of sql user and database names depending of the local configuration. 2016-04-27 19:04:49 +02:00
Remi 06fdadbcd0 bug fix: rediction to https was called inside shell call 2016-03-03 16:20:41 +01:00
Remi d041bcbeca fix test if variables is set 2016-03-03 16:06:38 +01:00
Remi 2bf3f45466 bug fix #40: force_https variable was disabled by commit bbd913e6e6
now redirects peacefully a client when connecting to non SSL panel.
2016-03-03 15:08:27 +01:00
Remi c18e3ca9f3 fixes #37 #68 2016-03-03 13:47:08 +01:00
Benjamin Sonntag 3e42567048 REFACTORING: code formatting of the panel + braces on if/while/for + fixe some missing or too many Globals in functions 2015-09-25 00:01:04 +02:00
Benjamin Sonntag 06f77b057f fixing HTTP AUTH (was in test, now in production) 2015-06-16 14:38:00 +02:00
Benjamin Sonntag 2014abb1e5 [ROLLBACK] rolling back the old way of working on variables. new using 'strata' is undocumented and not working 2014-11-27 15:30:49 +01:00
Benjamin Sonntag 0301409dbf adding changelog, fixing srand() not properly called by php itself 2014-11-25 11:38:55 +01:00
Benjamin Sonntag c96f928056 fixing alternc_shutdown bug 2014-08-27 11:20:54 +02:00
fser 824151f216 restored the DB_System for compatibility issues 2014-07-04 23:39:50 +02:00
Fran��ois Serman 0c88edaf0f restored the db_system extends db_sql for backward compatibility, $db remains a db_sql() 2014-06-26 09:48:22 +00:00
Fran��ois Serman 3352babbf3 toward PDO and beyond! 2014-06-26 09:40:04 +00:00
Alan Garcia d2e69b4975 Corrige des variables 2014-03-28 11:37:36 +00:00
Alan Garcia 8dbec8e243 Enleve les derniere declaration de var de mysql.sql et les range dans config. 2014-03-27 16:40:30 +00:00
Alan Garcia 02f735ecdf Some cosmetic 2014-03-26 14:36:36 +00:00
alban 6adef177c9 [fix] code documentation, comments and cosmetic changes 2014-03-26 14:29:08 +01:00
Alan Garcia ed3ab589dd Coding style 2014-03-26 11:22:32 +00:00
Alan Garcia df35ae1b74 Facepalm. 2014-02-27 17:12:02 +00:00
Alan Garcia b04ea5c362 Update domain en PHP
NOrmalement, tout roule.
2014-02-27 16:43:11 +00:00
Alan Garcia 7af68b7979 Chemin absolu pour xhprof 2014-02-05 13:51:27 +00:00
Alan Garcia f91898b537 Patch pour XHPRof 2014-01-30 17:33:52 +00:00
Alan Garcia 2583bc73f2 Permet d'activer xhprof 2014-01-21 08:45:25 +00:00
Alan Garcia 8f67797f3b Variables deviens une classe 2014-01-20 13:44:25 +00:00
Alan Garcia 48248cf5c9 R.I.P. semaphore 18577 2014-01-14 10:24:29 +00:00
Alan Garcia 7d50c398c7 Améliore la génération de la conf apache
* hooks
 * retrocompatibilité
2014-01-03 09:30:35 +00:00
Alan Garcia bb9f8b111f Premier jet pour generation de la conf apache (update_domains -> function_hosting) en php 2014-01-02 15:17:40 +00:00
Alan Garcia ed34d3bc3c Maintenant on peux désactiver le login pour tout le monde SAUF l'admin.
Pratique lors des mise à jour.
2013-09-12 13:17:04 +00:00
Alan Garcia 2902601157 Fix #1066
Permet de locker tout les jobs
2013-09-12 09:28:31 +00:00
Benjamin Sonntag 714c26033d fixing mysql_real_escape_string issue (deprecated) 2013-07-09 21:59:13 +00:00