f48618d0e5
Merge remote-tracking branch 'origin/pr-235'
...
Fix #227 : Use stronger password hashes #235
2018-06-21 17:44:53 +02:00
8166ceb58f
Merge remote-tracking branch 'origin/pr-244'
...
Fix #245 : Files default to unwritable when permissions are changed in… #246
2018-06-21 17:44:17 +02:00
0217985655
Merge remote-tracking branch 'origin/pr-246'
...
https://github.com/AlternC/AlternC/pull/246
Fix #245 : Files default to unwritable when permissions are changed in… #246
2018-06-21 17:43:31 +02:00
c8d94d2a50
SSL massive backport
...
* Now we integrate all alternc-feature in native alternc
* Files are backported as waiting by alternc
* Some files was renammed or moved to follow alternc installation
process
2018-06-21 17:26:27 +02:00
Kienan Stewart
83d03b8ee7
Fix #245 : Files default to unwritable when permissions are changed in the file browser
2018-06-08 15:10:26 -04:00
Kienan Stewart
f39e72d58a
Fixes #243 : Fix typo in domain_name variable
2018-06-08 14:32:01 -04:00
71ed8bf5f4
[fix] wrong field name in account creation in MySQL
2018-06-05 08:41:59 +02:00
Kienan Stewart
88f3457191
Use sha512 crypt to store ftp password hashes
2018-04-16 22:46:05 -04:00
Kienan Stewart
56cbd2f8b4
Move the sha512 crypt hash into it's own function
2018-04-16 22:35:41 -04:00
Kienan Stewart
294397e10f
Merge branch 'issue-227-dovecot_password' into issue-227-password_hashes
2018-04-16 22:27:19 -04:00
Kienan Stewart
00c1d55406
Generate SHA512-CRYPT hashes for e-mail addresses
2018-04-16 21:02:45 -04:00
Kienan Stewart
a609984d39
Fix invocations of password_hash()
2018-04-15 22:00:16 -04:00
Kienan Stewart
971e38778f
Update stored password hash on user login.
...
If an md5 hash is stored, a new hash will be calculated and stored.
2018-04-15 19:03:57 -04:00
Kienan Stewart
b5382bb13b
Replace _password_verify with password_verify
...
PHP's password_verify function does know how to recognize md5 hashes: a custom
check is not necessary.
2018-04-15 19:02:32 -04:00
Kienan Stewart
6084650181
Use PHP's built-in password hashing and verification for user accounts
2018-04-15 18:26:41 -04:00
f392ad11a0
[fix] cron rolling curl call INSIDE the loop :/
2018-02-28 10:39:55 +01:00
7d35b9cb59
fixing db_del bug, thanks @Petit42
2018-02-12 14:57:11 +01:00
32261e5871
Protected dir creation error messages are not helpful.
...
Current error messages that are shown and logged when a problem occurs
when creating htaccess and htpasswd files for a protected dir are really
not helpful.
The messages don't even mention which file caused the error.
Sometimes when the files can't be created, it's not because they're
already present, for example when there's a permission error.
Also we've already verified that they are absent with file_exists so
the current error message is not accurate at all!
To empower users, we need to give them more details about the error. For
that we want to show the error that the file creation logged itself.
Finally, we've already verified that the htacces file already exists, so
there's no point in using touch beforehand. We should just let fopen try
to create the file and report whatever went wrong if anything happens.
2017-12-29 11:56:03 -05:00
407d8b91da
Don't raise a blocking error
...
* With deprecate error class, it's only a warning, not a error.
Should solve #210
2017-11-19 15:09:04 +01:00
5b7622ce90
[cosm] many cosmetic comment fixes, + ensure license and copyright everywhere
2017-10-08 19:31:34 +02:00
a2e6349998
[fix] removing useless echoes from m_bro
2017-10-07 20:07:26 +02:00
267d874a0d
fixing some language issues
2017-10-07 19:08:17 +02:00
8ba0fbf88c
[fix] error message not appearing in main.php (in case of CSRF failure)
2017-10-07 17:49:19 +02:00
80ec8fc748
[fix] the compatibility system of domaines_types was not working. Fixing that (null in SQL is awefully weird)
2017-10-07 17:27:03 +02:00
1c6191eabc
adding \n at the end of error message in logAlternC()
2017-10-07 16:48:56 +02:00
5d9fe41056
[fix] error message was incorrect when login failed, or csrf failed at login
2017-10-07 16:46:46 +02:00
941475b094
fixing an error message shown when browsing as a subadmin
2017-10-07 16:13:26 +02:00
7fcd2e359b
[fix] whois() doesn't work and prevent a legitimate install. We comment-out the 'non existing' scenario for now. See #195
2017-10-07 15:45:33 +02:00
985094a881
Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1
2017-10-07 15:12:27 +02:00
ca6b1cf4d9
[enh] removing the unmaintained upnp package
2017-10-07 15:12:18 +02:00
cf949cf245
Forgot Heredoc syntax
...
In php no more required to use heredoc and done some linter headache
2017-10-07 12:19:43 +02:00
3de55aca37
[cosm] reindent, check language of comments, ensure /** phpdoc style comments, simplify file header (license only) etc.
2017-10-06 23:42:39 +02:00
6581c7d6c4
[doc] misc doc translation fr>en
2017-10-06 22:48:22 +02:00
cc64e7745f
[fix] not using debug_backtrace, please, [doc] doc to english
2017-10-06 19:34:50 +02:00
562b7e6013
[doc] english documentation in functions.php [fix] missing parameter passed to display_div_generate_password
2017-10-06 18:54:13 +02:00
6b61eff4b1
fixing ->error = 0 remapped to ->init_msgs();
2017-10-06 18:29:30 +02:00
33f8e78885
[fix] class m_messages fixed to use 'level' instead of 'type' or 'cat' + force CAP on levels + merge OK and INFO
2017-10-06 18:04:36 +02:00
8c524bd80d
[fix] The Error class should exist, with deprecation warnings
...
Conflicts:
bureau/class/m_err.php
2017-10-06 17:54:01 +02:00
4d8ba24248
[fix] more explicit error message for CSRF
2017-10-06 16:53:50 +02:00
b777f982e5
[doc] switching comments to english for quenenni patches
2017-10-06 12:00:27 +02:00
b88b639b60
Merge branch 'feature-message' of https://github.com/AlternC/AlternC into feature-message
2017-09-12 14:50:14 +02:00
f6f5a15ded
le mdp des comptes mails étaient changés dans certains cas où il ne fallait pas
2017-09-12 14:49:33 +02:00
25379ec441
Merge branch 'stable-3.1' into feature-message
2017-09-06 18:44:38 +02:00
39947d4f1c
fixing the detection of conflicts in sub_domains
2017-09-06 18:43:40 +02:00
65f994f763
petit oubli de màj de $err -> $msg dans functions.php
2017-08-22 18:02:46 +02:00
7dce491b10
petite correction d'affichage de msgs
2017-08-21 17:50:57 +02:00
f92f92d34e
suppresion des textes 'à traduire' + corr de 2 bugs
2017-08-18 15:32:16 +02:00
5e0d4e8dc7
système de quota - quota Vs du.pl + affichage des quotas pour les utilisateurs
2017-08-17 21:32:21 +02:00
6b7d5e7d90
le reste des fichiers & style.css
2017-08-17 03:32:18 +02:00
8479d79bde
classe quota & fichiers section admin associés
2017-08-16 19:46:53 +02:00
Benjamin Sonntag
Kienan Stewart