Benjamin Sonntag
267d874a0d
fixing some language issues
2017-10-07 19:08:17 +02:00
alban
4d4a55d424
[fix] the browser change permissions action should work
2017-10-07 19:05:01 +02:00
Benjamin Sonntag
79c3058e61
[enh] proper style for sql bck and sql restaure, + remove ui issue with browseforfolder buttons
2017-10-07 18:45:08 +02:00
Benjamin Sonntag
c4da8edf90
[fix] enhance the display of phpmyadmin SSO access : goes directly to the right database
2017-10-07 18:28:02 +02:00
Benjamin Sonntag
08f5d9b15c
[fix] UX missing proper messages for mysql
2017-10-07 18:20:18 +02:00
Benjamin Sonntag
94adbb1834
[fix] browser managing properly EMPTY actions (no file or folder selected when checking 'move', 'delete', 'permission', or 'rename' ...
2017-10-07 18:01:12 +02:00
Benjamin Sonntag
8ba0fbf88c
[fix] error message not appearing in main.php (in case of CSRF failure)
2017-10-07 17:49:19 +02:00
Benjamin Sonntag
80ec8fc748
[fix] the compatibility system of domaines_types was not working. Fixing that (null in SQL is awefully weird)
2017-10-07 17:27:03 +02:00
Benjamin Sonntag
1c6191eabc
adding \n at the end of error message in logAlternC()
2017-10-07 16:48:56 +02:00
Benjamin Sonntag
5d9fe41056
[fix] error message was incorrect when login failed, or csrf failed at login
2017-10-07 16:46:46 +02:00
Benjamin Sonntag
941475b094
fixing an error message shown when browsing as a subadmin
2017-10-07 16:13:26 +02:00
Benjamin Sonntag
7fcd2e359b
[fix] whois() doesn't work and prevent a legitimate install. We comment-out the 'non existing' scenario for now. See #195
2017-10-07 15:45:33 +02:00
Benjamin Sonntag
985094a881
Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1
2017-10-07 15:12:27 +02:00
Benjamin Sonntag
ca6b1cf4d9
[enh] removing the unmaintained upnp package
2017-10-07 15:12:18 +02:00
azerttyu
cf949cf245
Forgot Heredoc syntax
...
In php no more required to use heredoc and done some linter headache
2017-10-07 12:19:43 +02:00
azerttyu
6e1a021ced
Linter Bugfixes
...
After #190 merge php linter check was missing
* Correct some typo code
2017-10-07 12:15:35 +02:00
azerttyu
ddeefbde63
From panel we must connect to phpmyadmin with sso credential
...
We profite to forgot also any phpmyadmin cookie session
2017-10-07 11:34:11 +02:00
Benjamin Sonntag
bae2649740
[ENH] new translations from Transifex
2017-10-07 00:07:52 +02:00
Benjamin Sonntag
7df788a0f0
[fix] translation update
2017-10-07 00:05:29 +02:00
Benjamin Sonntag
c652b43b13
[fix] translation update to transifex
2017-10-06 23:54:21 +02:00
Benjamin Sonntag
3de55aca37
[cosm] reindent, check language of comments, ensure /** phpdoc style comments, simplify file header (license only) etc.
2017-10-06 23:42:39 +02:00
Benjamin Sonntag
6581c7d6c4
[doc] misc doc translation fr>en
2017-10-06 22:48:22 +02:00
Benjamin Sonntag
cc64e7745f
[fix] not using debug_backtrace, please, [doc] doc to english
2017-10-06 19:34:50 +02:00
Benjamin Sonntag
1f4ea5d132
no usage in admin/ of the panel. Useless anyway since is_it_my_mail() check it already
2017-10-06 19:12:00 +02:00
Benjamin Sonntag
562b7e6013
[doc] english documentation in functions.php [fix] missing parameter passed to display_div_generate_password
2017-10-06 18:54:13 +02:00
Benjamin Sonntag
6b61eff4b1
fixing ->error = 0 remapped to ->init_msgs();
2017-10-06 18:29:30 +02:00
Benjamin Sonntag
d25486213e
[fix] uppercase by default for known has_msgs() calls
2017-10-06 18:12:41 +02:00
Benjamin Sonntag
33f8e78885
[fix] class m_messages fixed to use 'level' instead of 'type' or 'cat' + force CAP on levels + merge OK and INFO
2017-10-06 18:04:36 +02:00
alban
8c524bd80d
[fix] The Error class should exist, with deprecation warnings
...
Conflicts:
bureau/class/m_err.php
2017-10-06 17:54:01 +02:00
Benjamin Sonntag
4d8ba24248
[fix] more explicit error message for CSRF
2017-10-06 16:53:50 +02:00
Benjamin Sonntag
b777f982e5
[doc] switching comments to english for quenenni patches
2017-10-06 12:00:27 +02:00
quenenni
b88b639b60
Merge branch 'feature-message' of https://github.com/AlternC/AlternC into feature-message
2017-09-12 14:50:14 +02:00
quenenni
f6f5a15ded
le mdp des comptes mails étaient changés dans certains cas où il ne fallait pas
2017-09-12 14:49:33 +02:00
Benjamin Sonntag
25379ec441
Merge branch 'stable-3.1' into feature-message
2017-09-06 18:44:38 +02:00
Benjamin Sonntag
39947d4f1c
fixing the detection of conflicts in sub_domains
2017-09-06 18:43:40 +02:00
quenenni
65f994f763
petit oubli de màj de $err -> $msg dans functions.php
2017-08-22 18:02:46 +02:00
quenenni
7dce491b10
petite correction d'affichage de msgs
2017-08-21 17:50:57 +02:00
quenenni
f92f92d34e
suppresion des textes 'à traduire' + corr de 2 bugs
2017-08-18 15:32:16 +02:00
quenenni
5e0d4e8dc7
système de quota - quota Vs du.pl + affichage des quotas pour les utilisateurs
2017-08-17 21:32:21 +02:00
quenenni
7d993ea51d
bug - n'acceptait pas un mdp vide quand on éditait un mail
2017-08-17 16:38:09 +02:00
quenenni
956f6fc2c6
fonction generate_password dans alternc.js
2017-08-17 04:35:51 +02:00
quenenni
6b7d5e7d90
le reste des fichiers & style.css
2017-08-17 03:32:18 +02:00
quenenni
8479d79bde
classe quota & fichiers section admin associés
2017-08-16 19:46:53 +02:00
quenenni
991b4b48e3
classe hta & fichiers section admin associés
2017-08-16 19:34:32 +02:00
quenenni
6f30c8bac4
classe piwik & fichiers section admin associés
2017-08-16 18:29:25 +02:00
quenenni
b4588c870a
classe browser (m_bro) & fichiers section admin associés
2017-08-16 02:44:54 +02:00
quenenni
31d024c5a1
classe dom & fichiers section admin associés
2017-08-16 02:23:22 +02:00
quenenni
8d5953f1c4
classe ftp + fichiers section admin associés
2017-08-15 20:05:02 +02:00
quenenni
6c40d19bbd
classe mysql & fichiers section admin associés
2017-08-15 19:51:04 +02:00
quenenni
b16c3ac69a
classe admin / fichiers section admin associés
2017-08-15 17:03:56 +02:00
quenenni
0d5caada2f
class mail & roundcube + fichiers admins associés
2017-08-15 16:11:57 +02:00
quenenni
ff154144e5
fonctions + local + db
2017-08-15 03:39:37 +02:00
quenenni
2f830d7e4f
Modifs dans le classe membre et la section membre d'admin
2017-08-15 03:19:52 +02:00
quenenni
a9cd6dc4af
Ajout de la classe messages qui remplace la classe error
2017-08-15 02:30:38 +02:00
Benjamin Sonntag
71980d06a8
removing IP stability check in the panel: it's unenforceable as of 2017 :/ Fixes #173
2017-08-14 10:12:47 +02:00
Benjamin Sonntag
41ad8b3632
fixing a branching issue in mail_doedit, fixes #164
2017-08-12 16:56:06 +02:00
Benjamin Sonntag
be63ec7192
Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1
2017-08-12 16:46:45 +02:00
Benjamin Sonntag
8cc2007a44
not counting mailman box in quotas, fixes #170
2017-08-12 16:46:00 +02:00
Benjamin Sonntag
798f7e7681
Merge pull request #179 from kent1D/patch-1
...
Error on isset for X_FORWARDED_PROTO
2017-08-12 16:42:40 +02:00
Benjamin Sonntag
53eec68f08
removing defmx/defmx2 when we say 'don't host email here', fixes #175
2017-08-12 16:31:46 +02:00
Benjamin Sonntag
c7226c9010
adding a maximum of 20 for the DEPTH of delete in the file browser (may cause havoc in unknown case found in farafina server)
2017-08-08 15:20:46 +02:00
kent1
5421c05aae
Error on isset for X_FORWARDED_PROTO
...
Should be `isset($_SERVER["HTTP_X_FORWARDED_PROTO"])` and not `!isset($_SERVER["HTTP_X_FORWARDED_PROTO"])`
Avoid a notice :
`PHP Notice: Undefined index: HTTP_X_FORWARDED_PROTO in /usr/share/alternc/panel/class/config.php on line 170`
2017-08-06 23:31:22 +02:00
Benjamin Sonntag
f529ffd7fc
updating translations from transifex
2017-06-20 12:16:53 +02:00
Benjamin Sonntag
46ab94707a
adding mandatory fields to the account creation form, Fixes #132
2017-06-18 18:51:11 +02:00
Benjamin Sonntag
cd310b355a
adding mandatory fields to the account creation form, Fixes #132
2017-06-18 18:45:57 +02:00
Benjamin Sonntag
957098327c
Merge pull request #146 from soul9/fix_pma_sso
...
latest security update of phpmyadmin (on wheezy) seems to have disabled the index.php, forcing the browser to go there directly
2017-06-07 15:15:07 +02:00
Benjamin Sonntag
43bb39105b
Merge pull request #153 from fser/fser/uniform-log-entries
...
log entries for error and log both log IP address
2017-06-07 15:14:03 +02:00
Benjamin Sonntag
ea4eea6145
adding a variable to ignore IP in sessions, currently broken it seems
2017-06-07 15:13:25 +02:00
Benjamin Sonntag
6d72cc522b
adding x-forwarded-proto = https management to detet https too
2017-06-07 14:31:30 +02:00
François (fser)
e452219136
log entries for error and log both log IP address
2017-06-03 11:22:35 +02:00
Remi
611e41a31b
bug fix: set success class to alert-success insted of alert-error after successful mailbox parameters update
2017-02-07 10:20:33 +01:00
Remi
4a2d1dcbdf
bug fix undelete mail
2017-01-24 18:29:13 +01:00
Remi
20dab5677a
bug fixes variable $dom_id et non $domain_id
2017-01-24 17:52:29 +01:00
John Soros
bec836f87b
latest security update of phpmyadmin seems to have disabled the indexes so we need to explicitely redirect to .../index.php
2017-01-20 17:41:52 +01:00
thms
cb56e77093
m_dom now refuses cname on its apex
2016-11-04 12:00:24 +01:00
Benjamin Sonntag
1dc41d5530
[fix] missing csrf on mail_manage_catchall.php
2016-10-27 16:32:49 +02:00
Benjamin Sonntag
fc068bc938
[fix] invalid token at login time
2016-08-29 16:55:05 +02:00
Benjamin Sonntag
4f3604e717
[FIX] #83 issue with FTP file with wrong rights.
2016-08-26 16:31:19 +02:00
Benjamin Sonntag
1d9e478f2e
[FIX] Undefined variable: res at upgrade time
2016-08-26 15:51:01 +02:00
Benjamin Sonntag
5ef516e0ba
Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1
2016-08-09 16:44:34 +02:00
Benjamin Sonntag
16bd8278a4
[fix] allow HTTPS on any panel (you'd better use letsencrypt then, but that's a valid choice. Fixes #106
2016-08-09 16:44:30 +02:00
Benjamin Sonntag
42eac1173d
Merge pull request #107 from AlternC/albancrommer-patch-1
...
Update config.php to allow HTTPS on other VHOSTS
2016-08-09 16:43:37 +02:00
Benjamin Sonntag
a35288b91e
[fix] the file editor allows an invalid token. Tell the user and give a new one to re-submit. Fixes #111
2016-08-09 16:40:11 +02:00
Remi
0c840f9f2e
bug fix: remove old references to unknown 'bw_web' quota values linking to not existing stats_show_per_month.php page and menu gadget
...
(anyone aiming to display custom menu gadget or size based quota could return in_menu=1 and type=size array values in hook_quota_get() function)
2016-07-15 18:40:29 +02:00
Alban Crommer
04c36baa77
Update config.php
...
See Issue #106
AlternC should allow HTTPS panel access for different host names
2016-07-13 12:19:33 +02:00
Benjamin Sonntag
ade5c51f0f
Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1
2016-07-12 15:54:30 +02:00
Benjamin Sonntag
3ffa78aa5f
[fix] fixing db issue when creating a DB + post/request for SQLRESTORE
2016-07-12 15:54:21 +02:00
Remi
1b73dff3a5
bug fix: sub admin were proposed to install hosting_tld for new user, but the domain creation silently failed
2016-07-07 12:59:56 +02:00
Benjamin Sonntag
e381692cbd
[fix] deleting a domain didn't work (post/request check)
2016-05-31 12:13:57 +02:00
Benjamin Sonntag
9057254059
[i18n] updating translations
2016-05-26 18:38:16 +02:00
Benjamin Sonntag
e806446945
[wip] fixing most found bug during big test at https://pad.lqdn.fr/p/alternc-tests-secu201605
2016-05-26 18:32:17 +02:00
Benjamin Sonntag
93ce8ffd0f
htmlentities in sql_getparams + check if db not found
2016-05-23 16:37:32 +02:00
Benjamin Sonntag
aef4f58e8a
[wip] fixing errors brought by the big security changes... update browser preferences fix + some post/get/request messup + zip not working properly
2016-05-23 16:08:23 +02:00
Benjamin Sonntag
d9d73d204c
fixing most GET/REQUEST to POST if needed
2016-05-23 15:03:13 +02:00
Benjamin Sonntag
b205d6bf8a
[wip] CSRF check should work better now...
2016-05-23 13:59:16 +02:00
Benjamin Sonntag
23a438de99
[wip] csrf check: moving the check to the right place: before authentication
2016-05-23 08:33:32 +02:00
Benjamin Sonntag
aaa3d68697
[wip] adding missing ehe() and eue() for htmlentities or urlencode in form fields
2016-05-23 08:27:58 +02:00
Benjamin Sonntag
a956b38c00
[wip] adding missing ehe() and eue() for htmlentities or urlencode in form fields
2016-05-22 20:14:26 +02:00
Benjamin Sonntag
de5837750e
same random system everywhere : mt_rand()
2016-05-22 17:40:57 +02:00
Benjamin Sonntag
6043e9c3d7
[wip] securing *all* forms through CSRF management (requires a new table)
2016-05-20 14:21:47 +02:00