638b153969
Merge remote-tracking branch 'origin/0.10.x' into private-0.10.35.1-dmarc
2023-01-18 16:18:03 +01:00
Michael Kaufmann
83ff0f5b00
fix api-key creation
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2022-12-02 13:42:26 +01:00
Michael Kaufmann
0562d248b5
use same error message for invalid user and disabled password reset to not give away if a user exists
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2022-12-02 13:24:27 +01:00
Michael Kaufmann
4d454a3903
secure api-key generation, dns-record as well as ssl-certificate deletion, logo uploading, frame-inclusion and user/email enumeration via 'forgot password'
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2022-12-02 09:22:08 +01:00
Michael Kaufmann
3f10a4aded
fix still possible html injection
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2022-11-05 12:37:53 +01:00
Michael Kaufmann
bbe82286aa
add security question for deleting api-keys to avoid accidental deletion
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2022-08-27 15:02:48 +02:00
2cb06be3d6
Merge tag '0.10.35.1' into private-0.10.33-dmarc
...
tagging release 0.10.35.1
2022-06-20 20:06:59 +02:00
93c72e6754
nextcloud quotas for froxlor logins
2022-06-20 20:06:50 +02:00
Michael Kaufmann
4546c00adb
validate sql_search and sql_orderby API parameters, set version to 0.10.34 for security release
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2022-04-01 09:27:45 +02:00
Michael Kaufmann
02d0194b9f
add empty index.html file to all folders to avoid accidental folder-content disclosure if 'Options Indexes' is set for a (parent)folder containing froxlor in webserver-config
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2022-03-24 14:30:34 +01:00
b118883013
merged with v0.10.33
2022-03-01 12:29:50 +01:00
Michael Kaufmann
84f5de42a9
move php-sessionclean script to scripts-dir instead of install/scripts/; add cronjob calling php-sessionclean if php-fpm is enabled; remove testing-note for let's encrypt in german language file
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2022-02-24 08:49:36 +01:00
Michael Kaufmann
6fdf2636fc
update docs url for api-documentation
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2022-01-25 14:54:52 +01:00
Oskar Eisemuth
4a912e3902
Feature/crontaskid ( #1005 )
...
* Add \Froxlor\Cron\TaskId for fixed task id naming
* Replace Cronjob::inserttask numbers with \Froxlor\Cron\TaskId constants
* Use TaskId in Froxlor\Cron\System\TasksCron
* Use TaskId in Froxlor\System\Cronjob,
simplify getOutstandingTasks.
Rename lng['tasks'] cronjob task description.
WARNING: DELETE_DOMAIN_PDNS, DELETE_DOMAIN_SSL now use %domain%
* Remove Froxlor\System\Cronjob type 3 check
2022-01-21 10:03:45 +01:00
timdeluxe
4d289e2a7f
Improves text for global open basedir setting ( #1004 )
2022-01-13 19:50:39 +01:00
Michael Kaufmann
d1d42f2055
allow setting path to acme.sh installation; fixes #1002
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-12-31 10:38:49 +01:00
Michael Kaufmann
cb0b537f6c
allow settings/updating documentroot (only relative to customer homedirectory) when change_serversettings permission is not granted; fixes #1000
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-11-27 18:04:36 +01:00
Michael Kaufmann
9870db2560
add possibility to assign new/edited php-config to all customer accounts; fixes #980
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-10-14 17:09:29 +02:00
Michael Kaufmann
5e281cf486
fix allowed-phpconfigs check in SubDomains.add() and SubDomains.update()
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-10-11 19:26:13 +02:00
Michael Kaufmann
a47b790e19
actually integrate the new czech language file; refs #976
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-09-04 09:30:44 +02:00
Nicolas
67351ec3c2
Adding support for PowerDNS-Replication ( #974 )
...
Adding support for powerdns-replication
2021-08-19 12:00:09 +02:00
Michael Kaufmann
0a1a3e023f
check dns for lets encrypt when adding/editing domains and via cron; fixes #971
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-08-04 13:44:13 +02:00
Stefan Weil
f8e2bc7bff
Fix some typos in code (found by codespell) ( #970 )
...
Signed-off-by: Stefan Weil <sw@weilnetz.de >
2021-08-01 19:00:33 +02:00
Stefan Weil
09038ac7aa
Fix some typos (found by codespell) ( #969 )
...
Signed-off-by: Stefan Weil <sw@weilnetz.de >
2021-07-31 09:51:54 +02:00
Michael Kaufmann
4c507232c7
add setting for a custom system group for all customer-users (required libnss-extrausers); fixes #953
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-07-30 12:16:37 +02:00
rex2630
b2005d7f29
[WIP] Czech language ( #870 )
...
* Update czech.lng.php
2021-07-21 20:41:07 +02:00
Michael Kaufmann
41a470fe36
added option to disable creation of default subdomain; fixes #960
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-07-21 09:53:54 +02:00
Michael Kaufmann
1d903770fc
have more power over theme logo, custom theme logo and uploaded logo; refs #958
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-07-20 20:35:54 +02:00
Kai
ce9d8dad7f
Feature-request #672 - database name prefixes + custom name ( #956 )
...
* Fix makeoption function call
* Update formfield.mysql_add.php
Added database name
* Update formfield.mysql_add.php
* Update formfield.mysql_add.php
* Update Mysqls.php
* Update DbManager.php
* Update formfield.mysql_add.php
* Update german.lng.php
* Update formfield.mysql_add.php
* Update Mysqls.php
* Added field database_name (Feature #672 )
* Added Testfunction for customer choosed database name
* Fixed test for customer choosed database name
Added docs for param $name
* Fixed mysql api command add
Removed doubled code
* Set settings for customer choosed db name
* Fixed wrong excepted for database name
* Renamed parameter database_name to custom_suffix
* Changed testCustomerMysqlsList
Added testCustomerMysqlsDBNameDelete
2021-07-19 19:10:12 +02:00
Michael Kaufmann
3b6792d548
Merge branch 'master' of github.com:Froxlor/Froxlor
2021-07-12 17:29:25 +02:00
Michael Kaufmann
36de6e09d4
remove beta notice from let's encrypt settings
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-07-12 17:29:21 +02:00
Daniel Schmitz
0dac045dc9
wip
2021-07-07 14:11:54 +08:00
Daniel Schmitz
9f5978e875
german translations
2021-07-07 13:33:33 +08:00
Daniel Schmitz
518ec202ab
wip
2021-07-07 13:26:15 +08:00
Michael Kaufmann
73991e855c
Support ZeroSSL via acme.sh (v3); refs #946
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-06-27 09:00:44 +02:00
Michael Kaufmann
61a50cc657
add setting for default serveralias value for new domains, refs #944
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-06-16 15:10:52 +02:00
Michael Kaufmann
82922f7aea
add new settings for legal-notes; terms-of-use and privacy-policy; fixes #930
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-03-24 14:36:48 +01:00
Michael Kaufmann
7fbbc2ea0b
add vhost replacer {FPMSOCKET} for custom vhost configs; fixes #931
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-03-24 13:46:24 +01:00
Michael Kaufmann
91d4432108
check rr against possible existing CNAME entries, fixes #927
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-03-15 17:33:30 +01:00
Daniel Reichelt
a1b8807b0f
dns: make mail address of SOA records configurable
2021-02-21 13:00:30 +01:00
Michael Kaufmann
3a17d03796
add option to specify (optional) fileextension/suffix for generated dkim-private keys; fixes #907
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-01-20 12:12:41 +01:00
Michael Kaufmann
9b86d576fa
do not display usages on dashboard in fixed size-units but dynamically adjusted
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2021-01-18 20:49:55 +01:00
Michael Kaufmann
78495b6487
update link to perl-fastcgi wiki on nginx.com; added setting to hide incompatible settings (depending on webserver)
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2020-12-30 16:41:26 +01:00
Michael Kaufmann
ecd707424f
change example of dhparams.pem folder so it does not conflict with default ssl-certificates-folder which gets purged by froxlor regulary
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2020-11-13 13:01:19 +01:00
Michael Kaufmann
b1b68364be
do not allow setting www as CNAME record if domain has automatic www-Alias enabled, fixes #895
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2020-10-31 16:16:05 +01:00
Michael Kaufmann
63d00cd453
forgot to add the language strings to the commit for avoid deletion of (super)admin
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2020-10-31 15:48:01 +01:00
Michael Kaufmann
bc73ed0c75
adjust tls default value to tlsv1.2; refs #839
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2020-05-18 20:48:04 +02:00
Michael Kaufmann
98c636c282
let send-to-alternative-email be optional if no address is given instead of displaying error that the email address is invalid; fixes #829
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2020-04-30 13:03:19 +02:00
Michael Kaufmann
78fc4f84b2
add optional dns validation for let's encrypt activated domains; fixes #817
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2020-04-14 10:28:33 +02:00
Michael Kaufmann
1fe9f1e9d6
fix language strings for cron cmdline setting and fallback to php binary if no setting is found
...
Signed-off-by: Michael Kaufmann <d00p@froxlor.org >
2020-03-08 10:30:33 +01:00