Commit Graph

1638 Commits

Author SHA1 Message Date
Benjamin Sonntag 5a3b9c7a13 [fix] next ssl step: we start to use /etc/ssl/(certs|private)/alternc-<servicename>.(pem|key) as location for system service certificates, also, trying to use PdoException in case of PDO error (better for bug tracking) 2018-06-24 15:43:23 +02:00
Benjamin Sonntag d13d093c09 [fix] misc ssl code issues 2018-06-23 17:13:36 +02:00
Benjamin Sonntag f9d2c783e5 [fix] alternc-ssl + dom global missing 2018-06-23 17:11:57 +02:00
Benjamin Sonntag 63f6c33f83 [fix] most lintian Errors \o/ 2018-06-23 17:04:32 +02:00
Benjamin Sonntag 719e1539b0 [fix] renaming update_certs, fixing deprecated usage of 2018-06-23 16:54:54 +02:00
Benjamin Sonntag a2e22a8d1f [fix] we check FIRST for certificate already existing in ssl->import_check() 2018-06-23 16:37:11 +02:00
Benjamin Sonntag 152551a8bb [fix] removing unused deduplicate in ssl 2018-06-23 16:31:11 +02:00
Benjamin Sonntag ac841451bc [enh] ssl class should work now, including system certificates and auto renewal of vhosts etc. 2018-06-23 16:28:50 +02:00
Benjamin Sonntag 8232c1a318 [enh] moving hosting_vhost-ssl.sh to be launched systematically by update_domains.sh, and renamed to update_cert.sh 2018-06-23 14:59:38 +02:00
Benjamin Sonntag 9587ff1bfc [enh] new generation of the m_ssl class: less code, no shared or ssl_action, simpler searchBestCert(), no duplicates in /var/lib/alternc/ssl/private/ etc. [NEED TESTS] 2018-06-23 13:05:10 +02:00
Benjamin Sonntag 8dc5c20fa5 [fix] remove now unused ico for menu icons (in css) 2018-06-23 11:49:49 +02:00
Benjamin Sonntag 0f59614372 [enh] fontawesome css everywhere (almost) 2018-06-23 11:46:45 +02:00
Benjamin Sonntag 2f00c01b48 [fix] Call to a member function rowCount() on boolean 2018-06-23 11:10:29 +02:00
Benjamin Sonntag 73376121e5 [enh] finishing the HTTPS preference code 2018-06-23 11:03:57 +02:00
Benjamin Sonntag 2ed4cbad21 [enh] finishing the HTTPS preference code 2018-06-23 10:35:08 +02:00
Benjamin Sonntag 6007a3dea2 adding provider to certificates + fixing cert search function 2018-06-22 22:49:43 +02:00
Benjamin Sonntag 3dbb4d68ac function to get the list of valid certs for a fqdn 2018-06-22 19:38:05 +02:00
Benjamin Sonntag 997795b935 starting to implement ssl best cert finder 2018-06-22 19:04:03 +02:00
Benjamin Sonntag ddbc6e2ff4 [fix] fixing variable issues 2018-06-22 19:03:48 +02:00
Benjamin Sonntag 1a0614dcf3 starting to show HTTPS preferences 2018-06-22 18:27:15 +02:00
Benjamin Sonntag 46e21285d6 [fix] check that an imported ssl certificate doesn't already exist 2018-06-22 18:26:56 +02:00
Benjamin Sonntag 5079aa2e03 [enh] change the name of some variables 2018-06-22 17:37:04 +02:00
Benjamin Sonntag 57c8dc5942 [enh] css using fontawesome 2018-06-22 17:13:43 +02:00
Benjamin Sonntag 09bb693480 [enh] adding HTTP/HTTPS/BOTH UI in the subdomain editor. 2018-06-22 16:31:23 +02:00
Benjamin Sonntag f7c05c5e23 adding HTTPS status in subdomain view 2018-06-22 15:06:08 +02:00
Benjamin Sonntag be49630527 [enh] replace old kde3 icons as png/img... by the free fontawesome css files 2018-06-22 12:43:07 +02:00
Benjamin Sonntag 6e9c3c3c63 Merge remote-tracking branch 'origin/pr-255'
Fix #254: Creating default domains for new members fails #255
2018-06-22 08:32:48 +02:00
Benjamin Sonntag 0f66e2f073 [enh] misc styling fixes for bootstrap 2018-06-21 19:33:12 +02:00
Benjamin Sonntag fe09524ff3 [enh] misc styling fixes for bootstrap 2018-06-21 19:15:18 +02:00
Benjamin Sonntag aff4ed989c [fix] merge SSL and Bootstrap styling 2018-06-21 17:51:16 +02:00
Benjamin Sonntag f48618d0e5 Merge remote-tracking branch 'origin/pr-235'
Fix #227: Use stronger password hashes #235
2018-06-21 17:44:53 +02:00
Benjamin Sonntag 8166ceb58f Merge remote-tracking branch 'origin/pr-244'
Fix #245: Files default to unwritable when permissions are changed in… #246
2018-06-21 17:44:17 +02:00
Benjamin Sonntag 0217985655 Merge remote-tracking branch 'origin/pr-246'
https://github.com/AlternC/AlternC/pull/246
Fix #245: Files default to unwritable when permissions are changed in… #246
2018-06-21 17:43:31 +02:00
Benjamin Sonntag 0c6e56d146 Merge remote-tracking branch 'origin/pr-252' 2018-06-21 17:41:55 +02:00
cam.lafit c8d94d2a50 SSL massive backport
* Now we integrate all alternc-feature in native alternc
* Files are backported as waiting by alternc
* Some files was renammed or moved to follow alternc installation
process
2018-06-21 17:26:27 +02:00
Jonathan Demmerlé 4d8d2c1c39
some fixes
@media (max-width: is ugly, but well, better than nothing.
2018-06-21 10:25:41 +02:00
Kienan Stewart ce80e3cdad Fix #254: Creating default domains for new members fails
A typo caused the check to see if domain delegation was allowed to
always fail.
2018-06-14 10:50:28 -04:00
Kienan Stewart 9c1e7cccd0 Get sub_domain_id and status from get instead of post in dom_substatus
The submission is done through links with get parameters (see dom_edit.php)
2018-06-12 21:11:14 -04:00
Kienan Stewart 83d03b8ee7 Fix #245: Files default to unwritable when permissions are changed in the file browser 2018-06-08 15:10:26 -04:00
Kienan Stewart f39e72d58a Fixes #243: Fix typo in domain_name variable 2018-06-08 14:32:01 -04:00
Benjamin Sonntag 71ed8bf5f4 [fix] wrong field name in account creation in MySQL 2018-06-05 08:41:59 +02:00
Kienan Stewart 88f3457191 Use sha512 crypt to store ftp password hashes 2018-04-16 22:46:05 -04:00
Kienan Stewart 56cbd2f8b4 Move the sha512 crypt hash into it's own function 2018-04-16 22:35:41 -04:00
Kienan Stewart 294397e10f Merge branch 'issue-227-dovecot_password' into issue-227-password_hashes 2018-04-16 22:27:19 -04:00
Kienan Stewart 00c1d55406 Generate SHA512-CRYPT hashes for e-mail addresses 2018-04-16 21:02:45 -04:00
Kienan Stewart a609984d39 Fix invocations of password_hash() 2018-04-15 22:00:16 -04:00
Kienan Stewart 971e38778f Update stored password hash on user login.
If an md5 hash is stored, a new hash will be calculated and stored.
2018-04-15 19:03:57 -04:00
Kienan Stewart b5382bb13b Replace _password_verify with password_verify
PHP's password_verify function does know how to recognize md5 hashes: a custom
check is not necessary.
2018-04-15 19:02:32 -04:00
Kienan Stewart 6084650181 Use PHP's built-in password hashing and verification for user accounts 2018-04-15 18:26:41 -04:00
Benjamin Sonntag f392ad11a0 [fix] cron rolling curl call INSIDE the loop :/ 2018-02-28 10:39:55 +01:00
Benjamin Sonntag 7d35b9cb59 fixing db_del bug, thanks @Petit42 2018-02-12 14:57:11 +01:00
Jonathan Demmerlé 9f57ebd4cf
New style.css based on bootstrap
All the style.css file replaced to look like bootstrap without any dependances.
2017-12-29 18:56:27 +01:00
Gabriel Filion 32261e5871 Protected dir creation error messages are not helpful.
Current error messages that are shown and logged when a problem occurs
when creating htaccess and htpasswd files for a protected dir are really
not helpful.

The messages don't even mention which file caused the error.

Sometimes when the files can't be created, it's not because they're
already present, for example when there's a permission error.
Also we've already verified that they are absent with file_exists so
the current error message is not accurate at all!

To empower users, we need to give them more details about the error. For
that we want to show the error that the file creation logged itself.

Finally, we've already verified that the htacces file already exists, so
there's no point in using touch beforehand. We should just let fopen try
to create the file and report whatever went wrong if anything happens.
2017-12-29 11:56:03 -05:00
azerttyu 407d8b91da Don't raise a blocking error
* With deprecate error class, it's only a warning, not a error.

Should solve #210
2017-11-19 15:09:04 +01:00
camlafit 87a8fb0096
Type on code
Fix #206
2017-10-31 10:45:30 +01:00
Benjamin Sonntag 4fd853c6ae [cosm] many cosmetic comment fixes, + ensure license and copyright everywhere 2017-10-12 17:54:48 +02:00
Benjamin Sonntag 90c7fd21c8 [cosm] many cosmetic comment fixes, + ensure license and copyright everywhere 2017-10-11 11:58:04 +02:00
Benjamin Sonntag 4dcb60b4e7 [cosm] many cosmetic comment fixes, + ensure license and copyright everywhere 2017-10-09 20:56:03 +02:00
Benjamin Sonntag 9a6ea8b5bf [cosm] many cosmetic comment fixes, + ensure license and copyright everywhere 2017-10-08 19:53:03 +02:00
Benjamin Sonntag 5b7622ce90 [cosm] many cosmetic comment fixes, + ensure license and copyright everywhere 2017-10-08 19:31:34 +02:00
alban f27d2173d6 [fix] the user parameters page should not fail on the first error 2017-10-08 16:05:29 +02:00
alban 3729f92f77 Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1 2017-10-08 15:14:40 +02:00
alban a990fca19f [fix] the total db account should be OK in global quotas view 2017-10-08 15:14:31 +02:00
Benjamin Sonntag 4ad4dbcc0c [fix] fixing a php notice 2017-10-08 15:01:12 +02:00
Benjamin Sonntag 527cac68f6 [fix] UPDATE of PO Translations, Fixes #45 + repos-to-tx.sh doing that automatically, + update from transifex 2017-10-08 14:51:51 +02:00
Benjamin Sonntag a2e6349998 [fix] removing useless echoes from m_bro 2017-10-07 20:07:26 +02:00
alban 68563797af [fix] the sql db creation page should redirect to the db info page 2017-10-07 19:30:50 +02:00
Benjamin Sonntag 5ea5a8074b [fix] locales / languages 2017-10-07 19:19:02 +02:00
Benjamin Sonntag 08824b72db Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1 2017-10-07 19:08:23 +02:00
Benjamin Sonntag 267d874a0d fixing some language issues 2017-10-07 19:08:17 +02:00
alban 4d4a55d424 [fix] the browser change permissions action should work 2017-10-07 19:05:01 +02:00
Benjamin Sonntag 79c3058e61 [enh] proper style for sql bck and sql restaure, + remove ui issue with browseforfolder buttons 2017-10-07 18:45:08 +02:00
Benjamin Sonntag c4da8edf90 [fix] enhance the display of phpmyadmin SSO access : goes directly to the right database 2017-10-07 18:28:02 +02:00
Benjamin Sonntag 08f5d9b15c [fix] UX missing proper messages for mysql 2017-10-07 18:20:18 +02:00
Benjamin Sonntag 94adbb1834 [fix] browser managing properly EMPTY actions (no file or folder selected when checking 'move', 'delete', 'permission', or 'rename' ... 2017-10-07 18:01:12 +02:00
Benjamin Sonntag 8ba0fbf88c [fix] error message not appearing in main.php (in case of CSRF failure) 2017-10-07 17:49:19 +02:00
Benjamin Sonntag 80ec8fc748 [fix] the compatibility system of domaines_types was not working. Fixing that (null in SQL is awefully weird) 2017-10-07 17:27:03 +02:00
Benjamin Sonntag 1c6191eabc adding \n at the end of error message in logAlternC() 2017-10-07 16:48:56 +02:00
Benjamin Sonntag 5d9fe41056 [fix] error message was incorrect when login failed, or csrf failed at login 2017-10-07 16:46:46 +02:00
Benjamin Sonntag 941475b094 fixing an error message shown when browsing as a subadmin 2017-10-07 16:13:26 +02:00
Benjamin Sonntag 7fcd2e359b [fix] whois() doesn't work and prevent a legitimate install. We comment-out the 'non existing' scenario for now. See #195 2017-10-07 15:45:33 +02:00
Benjamin Sonntag 985094a881 Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1 2017-10-07 15:12:27 +02:00
Benjamin Sonntag ca6b1cf4d9 [enh] removing the unmaintained upnp package 2017-10-07 15:12:18 +02:00
azerttyu cf949cf245 Forgot Heredoc syntax
In php no more required to use heredoc and done some linter headache
2017-10-07 12:19:43 +02:00
azerttyu 6e1a021ced Linter Bugfixes
After #190 merge php linter check was missing

* Correct some typo code
2017-10-07 12:15:35 +02:00
azerttyu ddeefbde63 From panel we must connect to phpmyadmin with sso credential
We profite to forgot also any phpmyadmin cookie session
2017-10-07 11:34:11 +02:00
Benjamin Sonntag bae2649740 [ENH] new translations from Transifex 2017-10-07 00:07:52 +02:00
Benjamin Sonntag 7df788a0f0 [fix] translation update 2017-10-07 00:05:29 +02:00
Benjamin Sonntag c652b43b13 [fix] translation update to transifex 2017-10-06 23:54:21 +02:00
Benjamin Sonntag 3de55aca37 [cosm] reindent, check language of comments, ensure /** phpdoc style comments, simplify file header (license only) etc. 2017-10-06 23:42:39 +02:00
Benjamin Sonntag 6581c7d6c4 [doc] misc doc translation fr>en 2017-10-06 22:48:22 +02:00
Benjamin Sonntag cc64e7745f [fix] not using debug_backtrace, please, [doc] doc to english 2017-10-06 19:34:50 +02:00
Benjamin Sonntag 1f4ea5d132 no usage in admin/ of the panel. Useless anyway since is_it_my_mail() check it already 2017-10-06 19:12:00 +02:00
Benjamin Sonntag 562b7e6013 [doc] english documentation in functions.php [fix] missing parameter passed to display_div_generate_password 2017-10-06 18:54:13 +02:00
Benjamin Sonntag 6b61eff4b1 fixing ->error = 0 remapped to ->init_msgs(); 2017-10-06 18:29:30 +02:00
Benjamin Sonntag d25486213e [fix] uppercase by default for known has_msgs() calls 2017-10-06 18:12:41 +02:00
Benjamin Sonntag 33f8e78885 [fix] class m_messages fixed to use 'level' instead of 'type' or 'cat' + force CAP on levels + merge OK and INFO 2017-10-06 18:04:36 +02:00
alban 8c524bd80d [fix] The Error class should exist, with deprecation warnings
Conflicts:
	bureau/class/m_err.php
2017-10-06 17:54:01 +02:00
Benjamin Sonntag 4d8ba24248 [fix] more explicit error message for CSRF 2017-10-06 16:53:50 +02:00
Benjamin Sonntag b777f982e5 [doc] switching comments to english for quenenni patches 2017-10-06 12:00:27 +02:00