41ad8b3632
fixing a branching issue in mail_doedit, fixes #164
2017-08-12 16:56:06 +02:00
be63ec7192
Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1
2017-08-12 16:46:45 +02:00
8cc2007a44
not counting mailman box in quotas, fixes #170
2017-08-12 16:46:00 +02:00
798f7e7681
Merge pull request #179 from kent1D/patch-1
...
Error on isset for X_FORWARDED_PROTO
2017-08-12 16:42:40 +02:00
53eec68f08
removing defmx/defmx2 when we say 'don't host email here', fixes #175
2017-08-12 16:31:46 +02:00
c7226c9010
adding a maximum of 20 for the DEPTH of delete in the file browser (may cause havoc in unknown case found in farafina server)
2017-08-08 15:20:46 +02:00
5421c05aae
Error on isset for X_FORWARDED_PROTO
...
Should be `isset($_SERVER["HTTP_X_FORWARDED_PROTO"])` and not `!isset($_SERVER["HTTP_X_FORWARDED_PROTO"])`
Avoid a notice :
`PHP Notice: Undefined index: HTTP_X_FORWARDED_PROTO in /usr/share/alternc/panel/class/config.php on line 170`
2017-08-06 23:31:22 +02:00
f529ffd7fc
updating translations from transifex
2017-06-20 12:16:53 +02:00
46ab94707a
adding mandatory fields to the account creation form, Fixes #132
2017-06-18 18:51:11 +02:00
cd310b355a
adding mandatory fields to the account creation form, Fixes #132
2017-06-18 18:45:57 +02:00
957098327c
Merge pull request #146 from soul9/fix_pma_sso
...
latest security update of phpmyadmin (on wheezy) seems to have disabled the index.php, forcing the browser to go there directly
2017-06-07 15:15:07 +02:00
43bb39105b
Merge pull request #153 from fser/fser/uniform-log-entries
...
log entries for error and log both log IP address
2017-06-07 15:14:03 +02:00
ea4eea6145
adding a variable to ignore IP in sessions, currently broken it seems
2017-06-07 15:13:25 +02:00
6d72cc522b
adding x-forwarded-proto = https management to detet https too
2017-06-07 14:31:30 +02:00
e452219136
log entries for error and log both log IP address
2017-06-03 11:22:35 +02:00
611e41a31b
bug fix: set success class to alert-success insted of alert-error after successful mailbox parameters update
2017-02-07 10:20:33 +01:00
4a2d1dcbdf
bug fix undelete mail
2017-01-24 18:29:13 +01:00
20dab5677a
bug fixes variable $dom_id et non $domain_id
2017-01-24 17:52:29 +01:00
bec836f87b
latest security update of phpmyadmin seems to have disabled the indexes so we need to explicitely redirect to .../index.php
2017-01-20 17:41:52 +01:00
cb56e77093
m_dom now refuses cname on its apex
2016-11-04 12:00:24 +01:00
1dc41d5530
[fix] missing csrf on mail_manage_catchall.php
2016-10-27 16:32:49 +02:00
fc068bc938
[fix] invalid token at login time
2016-08-29 16:55:05 +02:00
4f3604e717
[FIX] #83 issue with FTP file with wrong rights.
2016-08-26 16:31:19 +02:00
1d9e478f2e
[FIX] Undefined variable: res at upgrade time
2016-08-26 15:51:01 +02:00
5ef516e0ba
Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1
2016-08-09 16:44:34 +02:00
16bd8278a4
[fix] allow HTTPS on any panel (you'd better use letsencrypt then, but that's a valid choice. Fixes #106
2016-08-09 16:44:30 +02:00
42eac1173d
Merge pull request #107 from AlternC/albancrommer-patch-1
...
Update config.php to allow HTTPS on other VHOSTS
2016-08-09 16:43:37 +02:00
a35288b91e
[fix] the file editor allows an invalid token. Tell the user and give a new one to re-submit. Fixes #111
2016-08-09 16:40:11 +02:00
0c840f9f2e
bug fix: remove old references to unknown 'bw_web' quota values linking to not existing stats_show_per_month.php page and menu gadget
...
(anyone aiming to display custom menu gadget or size based quota could return in_menu=1 and type=size array values in hook_quota_get() function)
2016-07-15 18:40:29 +02:00
04c36baa77
Update config.php
...
See Issue #106
AlternC should allow HTTPS panel access for different host names
2016-07-13 12:19:33 +02:00
ade5c51f0f
Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1
2016-07-12 15:54:30 +02:00
3ffa78aa5f
[fix] fixing db issue when creating a DB + post/request for SQLRESTORE
2016-07-12 15:54:21 +02:00
1b73dff3a5
bug fix: sub admin were proposed to install hosting_tld for new user, but the domain creation silently failed
2016-07-07 12:59:56 +02:00
e381692cbd
[fix] deleting a domain didn't work (post/request check)
2016-05-31 12:13:57 +02:00
9057254059
[i18n] updating translations
2016-05-26 18:38:16 +02:00
e806446945
[wip] fixing most found bug during big test at https://pad.lqdn.fr/p/alternc-tests-secu201605
2016-05-26 18:32:17 +02:00
93ce8ffd0f
htmlentities in sql_getparams + check if db not found
2016-05-23 16:37:32 +02:00
aef4f58e8a
[wip] fixing errors brought by the big security changes... update browser preferences fix + some post/get/request messup + zip not working properly
2016-05-23 16:08:23 +02:00
d9d73d204c
fixing most GET/REQUEST to POST if needed
2016-05-23 15:03:13 +02:00
b205d6bf8a
[wip] CSRF check should work better now...
2016-05-23 13:59:16 +02:00
23a438de99
[wip] csrf check: moving the check to the right place: before authentication
2016-05-23 08:33:32 +02:00
aaa3d68697
[wip] adding missing ehe() and eue() for htmlentities or urlencode in form fields
2016-05-23 08:27:58 +02:00
a956b38c00
[wip] adding missing ehe() and eue() for htmlentities or urlencode in form fields
2016-05-22 20:14:26 +02:00
de5837750e
same random system everywhere : mt_rand()
2016-05-22 17:40:57 +02:00
6043e9c3d7
[wip] securing *all* forms through CSRF management (requires a new table)
2016-05-20 14:21:47 +02:00
d9bdfaf1ac
[wip] adding csrf form management, to be added everywhere
2016-05-19 17:04:49 +02:00
7b1e5bba94
[wip] m_mail LIMIT shall not be quoted
2016-05-18 18:41:27 +02:00
424b2a9ce7
[wip] more PDO fixes
2016-05-18 18:24:40 +02:00
b1ca1d88ae
fixing PDO for MySQL class and spoolsize (adding exec() for direct queries, manage properly query() call without arguments (no prepare, allow show database)
2016-05-18 18:00:04 +02:00
8392c1d84f
fixing quote + doms + roundcube & squirrelmail's quoting using PDO
2016-05-18 15:39:41 +02:00
b6eb1e668c
fixing get_remote_ip() quoting
2016-05-18 15:12:49 +02:00
06076b6fe0
moving https check down to AFTER hook/err initialization
2016-05-18 15:04:19 +02:00
4e558e5e7c
[wip] Passing mysql request params into array arguments for the query method (part 4)
2016-05-18 12:51:03 +02:00
61b07a257d
[wip] Passing mysql request params into array arguments for the query method (part 3)
2016-05-18 11:19:20 +02:00
86e7bfb6b8
Merge branch '20160515-secu' of github.com:AlternC/AlternC into 20160515-secu
2016-05-17 18:58:25 +02:00
3665aabc96
[wip] Passing mysql request params into array arguments for the query method (part 2)
2016-05-17 18:57:01 +02:00
0c505e8b6c
[security] using prepared query in the panel
2016-05-17 18:47:09 +02:00
262336aadb
[wip] Passing mysql request params into array arguments for the query method (part 1)
2016-05-17 17:21:08 +02:00
bc5c8f7e34
Merge branch 'pdo_migration' into 20160515-secu
...
Conflicts:
bureau/class/config.php
bureau/class/db_mysql.php
bureau/class/m_action.php
bureau/class/m_variables.php
2016-05-17 15:10:37 +02:00
28f09e31e1
More explicit message for sql names length limit
2016-04-28 12:54:53 +02:00
b28b73e913
issue #75 : defines length of sql user and database names depending of the local configuration.
2016-04-27 19:04:49 +02:00
c8353f3f21
initialize , Fixes #56
2016-03-13 13:23:11 +01:00
6388489d4f
bug fix: Quota use was different when switching language
...
use of str_pad inside get_size_unit() was removing decimal part due to localization issues (coma separator instead of dot)
2016-03-09 10:58:19 +01:00
06fdadbcd0
bug fix: rediction to https was called inside shell call
2016-03-03 16:20:41 +01:00
d041bcbeca
fix test if variables is set
2016-03-03 16:06:38 +01:00
2bf3f45466
bug fix #40 : force_https variable was disabled by commit bbd913e6e6
...
now redirects peacefully a client when connecting to non SSL panel.
2016-03-03 15:08:27 +01:00
911250a73f
fixes #7 : show alert-info instead of alert-error when successfully changins sql users rights
2016-03-03 14:35:57 +01:00
c18e3ca9f3
fixes #37 #68
2016-03-03 13:47:08 +01:00
5ab6a47862
fixes some PHP warnings
2016-03-03 12:07:38 +01:00
9ec0668da5
bug fix: mailman wrappers were not added if mail quota was over
2016-03-03 11:28:26 +01:00
1fe966f5d8
bug fixes: spf and dmarc record weren't updated for every domain due to loss in mysql result query buffer
2016-03-02 14:17:32 +01:00
925674cf1e
translation fix: el tuteo es mas corriente en los sitios web de nuevas tecnologías
2016-02-26 10:39:07 +01:00
291572224f
cosmetic fix: removed inline CSS and gives nice display for smaller screen
...
will give better rendering for mainstream modern browsers
2016-02-26 10:17:05 +01:00
a9e057cbd1
bug fix: installed domain list was too slow due to DNS request on self managed records (gesdns=1)
...
bug fix: do not allow DNS modification of created domains under hosting_tld
2016-02-25 16:13:08 +01:00
7eb64f08a5
Merge branch 'stable-3.1' of github.com:AlternC/AlternC into stable-3.1
2016-02-25 14:17:43 +01:00
6cb248aec5
Some spanish translations. Replace dutch (nederlands) with spanish in default languages (more translated strings, and larger public)
2016-02-25 14:12:41 +01:00
b867d5a4dd
Merge pull request #24 from GuillaumeFromage/stable-3.1
...
Added support for .co, which has the same layout as .cc (need another patch to add it to TLD table)
2016-02-24 16:12:02 +01:00
9f8c2a8e1e
Merge pull request #58 from asso-infini/patch-1
...
Update m_bro.php to manager bz2
2016-02-24 16:11:03 +01:00
1c049f6bc6
bug fix: quota summary was inserted directly on main page without calling the appropriate hook.
2016-02-24 14:49:33 +01:00
79097f48da
bug fix: correct typo in the last commit
2016-02-24 11:15:55 +01:00
6e3a496f25
bug fixes: some fixes in english translation. didn't modify the original source file as it would have repercussion on other languages
...
(also modified the translation for España, was using the norwegian "spania" term)
2016-02-24 11:11:15 +01:00
3fa2b9c625
bug fix: call to bad function name (m_admin::mail_all_members() instead of m_admin::mailallmembers())
2016-02-23 22:29:03 +01:00
983524b14b
bug fix: sort in file browser to respect size and date order
2016-02-23 15:46:27 +01:00
767044fcb5
bug fixes in file editor (bad encoded file names were blank, can_edit was not called on 2 or 3 columns, also fixes a bug in date display)
2016-02-23 13:35:21 +01:00
f5737e0ee6
bug fixes in adm_list: filter implementation and screen display
2016-02-23 12:02:58 +01:00
604592eedd
bug fixes in ACL, wildcard on vhost, and some sql bug
2016-02-22 15:52:55 +01:00
76895cf5fe
Update m_bro.php
...
Gestion des archives dont l'extension est .bz, .bz2, .Z, .tgz, tbz ou tbz2
Si on a réussi à traiter l'archive, on n'essaye pas de la traiter une nouvelle fois.
Dans le cas de l'utilisation de la commande tar, on utilise plutôt les id proprietaire et groupe des fichiers plutot que le nom des proprietaires et groupes des fichiers avec l'option --numeric-owner
2016-02-15 21:16:22 +01:00
02ec16253b
Better fix for cname message, Fixes #25
2016-01-18 17:05:35 +01:00
1b61e78a11
fixing display of DB Size in MySQL. Fixes #31
2016-01-18 17:02:46 +01:00
6c6013e147
spit out a Warning when editing a mailbox without POP OR RECIPIENTS. Fixes #18
2016-01-15 15:13:12 +01:00
9a6cba4ebb
Fix cname error not sent to user interface. Fixes #25
2016-01-14 18:15:25 +01:00
6d24bd9739
fixing the Choosing of a (dns hosted only) domain name to be a master when installing a slave. Fixes #28
2016-01-14 18:07:34 +01:00
48e71faa88
[fix] autocomplete honeypot field to trick firefox: prevent auto-filing of non-needed form passwords.
2016-01-14 16:24:00 +01:00
5f4b6ebb7b
fixing #26 : not allowing underscore in domain names (except at the beginning of a domain member, like _tcp)
2016-01-13 17:26:47 +01:00
6398702f74
fixing <? without php for Jessie
2015-12-22 16:56:03 +01:00
3e3a9d4e83
fixing <? without php for Jessie
2015-12-22 16:53:45 +01:00
9a4594fd82
Added support for .co, which has the same layout as .cc
2015-12-07 13:24:32 -05:00
3b6d527349
removing unbreakable space in php source code
2015-12-07 11:20:05 +01:00
1d4a541243
fixing phpmyadmin sso
2015-11-17 10:45:20 +01:00
fbce91bb39
put comment on the sleep()
2015-11-16 08:27:56 +01:00
bffd7021c6
update missing FR translations
2015-11-11 09:48:07 +01:00
fa5ca54555
We know SHOW the 'protected' files in the browser, so that you understand why you can't edit them
2015-11-11 09:43:57 +01:00
edf639d048
fixing a visual bug when uncompressing a .tar.gz file
2015-11-05 18:31:16 +01:00
bcf093ffa7
fixing a visual bug when uncompressing a .tar.gz file
2015-11-05 18:25:27 +01:00
4cfa74401c
fixing missing value2 affectation
2015-11-05 18:07:38 +01:00
eba60af8b9
fixing #12 eu domain warning from php
2015-11-05 17:40:17 +01:00
d4c43a9717
adding information for noerase domains, Fixes #10
2015-09-25 18:02:23 +02:00
d3ab589e56
REFACTORING: code formatting of the panel + braces on if/while/for + fixe some missing or too many Globals in functions
2015-09-25 17:42:00 +02:00
3e42567048
REFACTORING: code formatting of the panel + braces on if/while/for + fixe some missing or too many Globals in functions
2015-09-25 00:01:04 +02:00
d4be9fddbf
fixing s in hooks
2015-09-02 12:09:55 +02:00
b71619c6f5
fixing some missing GLOBAL + issue with variables_set
2015-09-02 11:30:40 +02:00
179f4dd580
fixing password policy issue with levensthein
2015-08-03 15:55:05 +02:00
a0575e0481
adding sort in quotas_users + update changelog
2015-07-31 15:47:51 +02:00
985b23339d
fixing error message '1' for locked domains
2015-07-31 15:47:11 +02:00
5a108d67b9
fixing dmarc subdomain
2015-07-31 11:57:29 +02:00
b0b0fa408e
adding experimental DMARC (relax) and SPF (relax) default support
2015-06-17 19:56:51 +02:00
ed914773d7
fixing sql injection in variables + detecting effective update (hook step 1)
2015-06-17 16:50:37 +02:00
2eadec4ae0
separating in a second table the advanced dns entries
2015-06-17 16:33:09 +02:00
0c70a3337f
CNAME is now checked properly (including . at the end)
2015-06-16 16:09:26 +02:00
f135d17e20
adding CHMOD to actions + fixing Permission bits not properly set
2015-06-16 15:35:14 +02:00
06f77b057f
fixing HTTP AUTH (was in test, now in production)
2015-06-16 14:38:00 +02:00
df31733d28
ftp access security translation
2015-06-16 14:37:22 +02:00
26e674a3a3
update translation
2015-06-16 14:11:33 +02:00
b2d1540693
adding levenshtein computation in password policy (deny >40% similarity with login) + deny login in password or the other way around
2015-06-16 14:09:11 +02:00
3b19a765f4
adding autocomplete='off' to any (non-login) password field, prevents firefox to fill hidden (like in the edit mail form) password field, or even non-hidden, effectively disturbing the user.
2015-06-16 13:48:13 +02:00
118da88237
fixing browse for folder not working
2015-06-09 11:23:28 +02:00
d6980d7664
proper spaces in admin
2015-06-08 19:21:34 +02:00
350750fe32
fixing m_bro not knowing how to delete files names 0
2015-06-08 14:41:23 +02:00
6e53879c29
fixing domaines_type issues with translation
2015-05-12 16:08:08 +02:00
667bc04316
Fixing Browse For Folder not working on Domaines-type with - in their name
2015-05-12 16:07:39 +02:00
50beb401ea
fixing alternc-ssl url-ssl template
2015-05-11 18:01:21 +02:00
9e6b687572
adding url-ssl redirect + fixing bro translation + fixing other translations
2015-05-11 17:33:32 +02:00
9aabf146fc
updating translations : FIX for french + adding awstats, ssl
2015-05-11 14:58:29 +02:00
1fb006b41a
fixing FTP/duplicated variable bug, thanks to jon_d
2015-04-29 14:25:03 +02:00
058d6e9acd
Fix for [1639] given by anonymous in CopyOneFile
2015-04-29 12:53:45 +02:00
45094e2a5d
fixing alias change not working in some case (no endline)
2015-04-28 16:49:59 +02:00
3cd5835c2e
[enh] translation and original texts updated
2015-04-27 09:03:44 +02:00
8042094af6
Last missing French translation
2015-04-27 09:02:10 +02:00
cea0c42c2b
translation to french, almost done
2015-04-26 23:52:31 +02:00
1b0ff0c48f
translation to french, starting
2015-04-26 00:23:43 +02:00
f01accd4c2
fix catchall crappy & with bugguy error messages
2015-04-22 17:32:40 +02:00
f8c5872c99
fixing unzip/untar/ungzip from panel
2015-04-22 16:09:07 +02:00
1ebec32e12
smaller field for languages like spanish & french
2015-04-20 19:16:56 +02:00
b3a1763839
adding tail log view + order by DATE last files before in logs
2015-02-11 11:29:49 +01:00
616306ecc6
adding tail log view + order by DATE last files before in logs
2015-02-11 11:28:15 +01:00
d8868ba541
[fix] ;;; END ALTERNC zones bug
2014-12-05 12:19:20 +01:00
6b7b5ee2ba
[fix] replacing %%FQDN%% in variables by , if not some things will not work (like shell scripts using mailname_bounce)
2014-11-27 16:15:18 +01:00
2014abb1e5
[ROLLBACK] rolling back the old way of working on variables. new using 'strata' is undocumented and not working
2014-11-27 15:30:49 +01:00
baabda2369
setting a function called statically to be static
2014-11-27 15:19:21 +01:00
b2dca9d915
[fix] some exec() didn't have escapeshellarg() as needed
2014-11-27 14:51:51 +01:00
508efe961f
fixing more in cron sending mail (was not working) or using http basic auth (not working either: don't use urlencode)
2014-11-25 15:10:09 +01:00
c2d8b317d0
fixing entirely the cron execution shell. This may fix a potential privilege escalation problem.
2014-11-25 14:36:20 +01:00
0301409dbf
adding changelog, fixing srand() not properly called by php itself
2014-11-25 11:38:55 +01:00
ad47f857cd
[fix] chmod action
2014-09-29 17:06:56 +02:00
7c597daa73
[fix] Missing chmod action
2014-09-09 14:52:56 +02:00
c96f928056
fixing alternc_shutdown bug
2014-08-27 11:20:54 +02:00
81aae4c2f4
back to our normal code syntax, fixing 'R = ' bug in urls
2014-08-22 11:04:05 +02:00
beebd51f37
fixing a bug when deleting file (double directory)
2014-08-21 11:37:48 +02:00
0dc8c4c71a
fix typo Error
2014-07-08 17:30:59 +02:00
e4ce562920
added last_error()
2014-07-08 14:39:37 +02:00
18e1058aa5
simplified m_action (imported from master)
2014-07-05 22:51:16 +02:00
824151f216
restored the DB_System for compatibility issues
2014-07-04 23:39:50 +02:00
14a642ab78
fixed "type" error for errno, and potential error on lastid()
2014-07-01 15:18:49 +02:00
3c4438895f
changing default attributes in order to avoid scrutinizer complains
2014-07-01 14:46:16 +02:00
0e088579c5
no $err->log but $this->halt
2014-06-26 10:29:45 +00:00
0c88edaf0f
restored the db_system extends db_sql for backward compatibility, $db remains a db_sql()
2014-06-26 09:48:22 +00:00
3b656f15dc
next_record takes no parameters
2014-06-26 09:43:11 +00:00
3352babbf3
toward PDO and beyond!
2014-06-26 09:40:04 +00:00
9c2090ff8b
ignore redundant entries when not OK on web_action
2014-06-25 16:38:00 +02:00
8113d2b866
disable help texts if empty, partly (missing IMAP/POP)
2014-06-18 18:55:00 +00:00
73606b8e26
add get_login_by_uid API
2014-06-18 15:26:53 +00:00
dd6ace0c0c
don't create piwik accounts with random gmail addresses, properly prefix the accounts so they're unique
2014-06-18 15:24:38 +00:00
fb9d6d8457
piwik: properly record the site id after creation
2014-06-18 15:05:34 +00:00
954ffc2ab0
fix the way we interpolate the URL
2014-06-18 14:40:07 +00:00
dbd029d8cf
warn users to switch to HTTPS if it's not enable, admins can opt out through a variable
2014-06-17 20:57:26 +00:00
1c627d243f
Test unitaires de demo
2014-04-07 16:28:48 +00:00
91f8745d84
[fix] m_variables multidimensinal values parsing and better documentation
2014-03-28 17:46:38 +01:00
ac9e50ac33
Doc + cosmetics
2014-03-28 16:14:32 +00:00
b2bcca72bd
new translations
2014-03-28 17:02:44 +01:00
9a6d9adfba
Merge branch 'master' of alternc.org:alternc
2014-03-28 16:28:47 +01:00
1f64a75743
adding \n after END AUTOMATIC FILE
2014-03-28 16:28:44 +01:00
408ff30a79
Shame on me : debug test was here...
2014-03-28 15:23:18 +00:00
cde8eb71e8
Mini modif
2014-03-28 15:18:23 +00:00
dfdd41655d
fixing 'undefined index' error
2014-03-28 16:08:21 +01:00
5409257c77
Commentaires sur m_dom
2014-03-28 16:01:18 +01:00
56fdcb8f9f
Quelques modifs sur la classe variables
2014-03-28 14:28:25 +00:00
d2e69b4975
Corrige des variables
2014-03-28 11:37:36 +00:00
c78437221d
Revert "Commence a passer en mysqli"
...
This reverts commit faaf268d68
2014-03-28 10:49:11 +01:00
41cee2ee5a
Revert "Mysql to mysqli"
...
This reverts commit ae216fee31
2014-03-28 10:48:58 +01:00
ae216fee31
Mysql to mysqli
2014-03-28 09:42:06 +00:00
faaf268d68
Commence a passer en mysqli
2014-03-28 09:26:49 +00:00
62981ecfa5
Some cosmetics
2014-03-28 09:14:53 +00:00
aa9acaa165
[fix] serveurList on m_dom.php
2014-03-27 19:08:33 +01:00
6fc53c040d
[fix] tabulations on m_dom.php
2014-03-27 19:03:59 +01:00
c63a814dbd
Cosmetics
2014-03-27 17:02:55 +00:00
b6462b87c7
merging mysql.sql from alan
2014-03-27 17:56:37 +01:00
8dbec8e243
Enleve les derniere declaration de var de mysql.sql et les range dans config.
2014-03-27 16:40:30 +00:00
ae02061a7e
fixing translations
2014-03-27 17:36:14 +01:00
9489d4f77c
Merge branch 'master' of alternc.org:alternc
2014-03-27 16:56:17 +01:00
566980a5a3
Updating language files from Transifex
2014-03-27 16:43:36 +01:00
Benjamin Sonntag