Commit Graph

891 Commits

Author SHA1 Message Date
Benjamin Sonntag 3dbb4d68ac function to get the list of valid certs for a fqdn 2018-06-22 19:38:05 +02:00
Benjamin Sonntag 997795b935 starting to implement ssl best cert finder 2018-06-22 19:04:03 +02:00
Benjamin Sonntag ddbc6e2ff4 [fix] fixing variable issues 2018-06-22 19:03:48 +02:00
Benjamin Sonntag 46e21285d6 [fix] check that an imported ssl certificate doesn't already exist 2018-06-22 18:26:56 +02:00
Benjamin Sonntag 5079aa2e03 [enh] change the name of some variables 2018-06-22 17:37:04 +02:00
Benjamin Sonntag 09bb693480 [enh] adding HTTP/HTTPS/BOTH UI in the subdomain editor. 2018-06-22 16:31:23 +02:00
Benjamin Sonntag f7c05c5e23 adding HTTPS status in subdomain view 2018-06-22 15:06:08 +02:00
Benjamin Sonntag 6e9c3c3c63 Merge remote-tracking branch 'origin/pr-255'
Fix #254: Creating default domains for new members fails #255
2018-06-22 08:32:48 +02:00
Benjamin Sonntag f48618d0e5 Merge remote-tracking branch 'origin/pr-235'
Fix #227: Use stronger password hashes #235
2018-06-21 17:44:53 +02:00
Benjamin Sonntag 8166ceb58f Merge remote-tracking branch 'origin/pr-244'
Fix #245: Files default to unwritable when permissions are changed in… #246
2018-06-21 17:44:17 +02:00
Benjamin Sonntag 0217985655 Merge remote-tracking branch 'origin/pr-246'
https://github.com/AlternC/AlternC/pull/246
Fix #245: Files default to unwritable when permissions are changed in… #246
2018-06-21 17:43:31 +02:00
cam.lafit c8d94d2a50 SSL massive backport
* Now we integrate all alternc-feature in native alternc
* Files are backported as waiting by alternc
* Some files was renammed or moved to follow alternc installation
process
2018-06-21 17:26:27 +02:00
Kienan Stewart ce80e3cdad Fix #254: Creating default domains for new members fails
A typo caused the check to see if domain delegation was allowed to
always fail.
2018-06-14 10:50:28 -04:00
Kienan Stewart 83d03b8ee7 Fix #245: Files default to unwritable when permissions are changed in the file browser 2018-06-08 15:10:26 -04:00
Kienan Stewart f39e72d58a Fixes #243: Fix typo in domain_name variable 2018-06-08 14:32:01 -04:00
Benjamin Sonntag 71ed8bf5f4 [fix] wrong field name in account creation in MySQL 2018-06-05 08:41:59 +02:00
Kienan Stewart 88f3457191 Use sha512 crypt to store ftp password hashes 2018-04-16 22:46:05 -04:00
Kienan Stewart 56cbd2f8b4 Move the sha512 crypt hash into it's own function 2018-04-16 22:35:41 -04:00
Kienan Stewart 294397e10f Merge branch 'issue-227-dovecot_password' into issue-227-password_hashes 2018-04-16 22:27:19 -04:00
Kienan Stewart 00c1d55406 Generate SHA512-CRYPT hashes for e-mail addresses 2018-04-16 21:02:45 -04:00
Kienan Stewart a609984d39 Fix invocations of password_hash() 2018-04-15 22:00:16 -04:00
Kienan Stewart 971e38778f Update stored password hash on user login.
If an md5 hash is stored, a new hash will be calculated and stored.
2018-04-15 19:03:57 -04:00
Kienan Stewart b5382bb13b Replace _password_verify with password_verify
PHP's password_verify function does know how to recognize md5 hashes: a custom
check is not necessary.
2018-04-15 19:02:32 -04:00
Kienan Stewart 6084650181 Use PHP's built-in password hashing and verification for user accounts 2018-04-15 18:26:41 -04:00
Benjamin Sonntag f392ad11a0 [fix] cron rolling curl call INSIDE the loop :/ 2018-02-28 10:39:55 +01:00
Benjamin Sonntag 7d35b9cb59 fixing db_del bug, thanks @Petit42 2018-02-12 14:57:11 +01:00
Gabriel Filion 32261e5871 Protected dir creation error messages are not helpful.
Current error messages that are shown and logged when a problem occurs
when creating htaccess and htpasswd files for a protected dir are really
not helpful.

The messages don't even mention which file caused the error.

Sometimes when the files can't be created, it's not because they're
already present, for example when there's a permission error.
Also we've already verified that they are absent with file_exists so
the current error message is not accurate at all!

To empower users, we need to give them more details about the error. For
that we want to show the error that the file creation logged itself.

Finally, we've already verified that the htacces file already exists, so
there's no point in using touch beforehand. We should just let fopen try
to create the file and report whatever went wrong if anything happens.
2017-12-29 11:56:03 -05:00
azerttyu 407d8b91da Don't raise a blocking error
* With deprecate error class, it's only a warning, not a error.

Should solve #210
2017-11-19 15:09:04 +01:00
Benjamin Sonntag 5b7622ce90 [cosm] many cosmetic comment fixes, + ensure license and copyright everywhere 2017-10-08 19:31:34 +02:00
Benjamin Sonntag a2e6349998 [fix] removing useless echoes from m_bro 2017-10-07 20:07:26 +02:00
Benjamin Sonntag 267d874a0d fixing some language issues 2017-10-07 19:08:17 +02:00
Benjamin Sonntag 8ba0fbf88c [fix] error message not appearing in main.php (in case of CSRF failure) 2017-10-07 17:49:19 +02:00
Benjamin Sonntag 80ec8fc748 [fix] the compatibility system of domaines_types was not working. Fixing that (null in SQL is awefully weird) 2017-10-07 17:27:03 +02:00
Benjamin Sonntag 1c6191eabc adding \n at the end of error message in logAlternC() 2017-10-07 16:48:56 +02:00
Benjamin Sonntag 5d9fe41056 [fix] error message was incorrect when login failed, or csrf failed at login 2017-10-07 16:46:46 +02:00
Benjamin Sonntag 941475b094 fixing an error message shown when browsing as a subadmin 2017-10-07 16:13:26 +02:00
Benjamin Sonntag 7fcd2e359b [fix] whois() doesn't work and prevent a legitimate install. We comment-out the 'non existing' scenario for now. See #195 2017-10-07 15:45:33 +02:00
Benjamin Sonntag 985094a881 Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1 2017-10-07 15:12:27 +02:00
Benjamin Sonntag ca6b1cf4d9 [enh] removing the unmaintained upnp package 2017-10-07 15:12:18 +02:00
azerttyu cf949cf245 Forgot Heredoc syntax
In php no more required to use heredoc and done some linter headache
2017-10-07 12:19:43 +02:00
Benjamin Sonntag 3de55aca37 [cosm] reindent, check language of comments, ensure /** phpdoc style comments, simplify file header (license only) etc. 2017-10-06 23:42:39 +02:00
Benjamin Sonntag 6581c7d6c4 [doc] misc doc translation fr>en 2017-10-06 22:48:22 +02:00
Benjamin Sonntag cc64e7745f [fix] not using debug_backtrace, please, [doc] doc to english 2017-10-06 19:34:50 +02:00
Benjamin Sonntag 562b7e6013 [doc] english documentation in functions.php [fix] missing parameter passed to display_div_generate_password 2017-10-06 18:54:13 +02:00
Benjamin Sonntag 6b61eff4b1 fixing ->error = 0 remapped to ->init_msgs(); 2017-10-06 18:29:30 +02:00
Benjamin Sonntag 33f8e78885 [fix] class m_messages fixed to use 'level' instead of 'type' or 'cat' + force CAP on levels + merge OK and INFO 2017-10-06 18:04:36 +02:00
alban 8c524bd80d [fix] The Error class should exist, with deprecation warnings
Conflicts:
	bureau/class/m_err.php
2017-10-06 17:54:01 +02:00
Benjamin Sonntag 4d8ba24248 [fix] more explicit error message for CSRF 2017-10-06 16:53:50 +02:00
Benjamin Sonntag b777f982e5 [doc] switching comments to english for quenenni patches 2017-10-06 12:00:27 +02:00
quenenni b88b639b60 Merge branch 'feature-message' of https://github.com/AlternC/AlternC into feature-message 2017-09-12 14:50:14 +02:00