Commit Graph

148 Commits

Author SHA1 Message Date
Michael Kaufmann
2d30394150 correctly redirect to last-page if session is timed out and remove passing script/qrystr url parameters
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2023-08-11 12:09:23 +02:00
Nicolas Thumann
78a259ef3b Fix IPv6 address in cookie domain (#1137)
* Implement getCookieHost to extract cookie host from HTTP_HOST
2023-05-10 08:26:08 +02:00
Michael Kaufmann
1679675aa1 introduce http-request rate-limit; smaller fixes
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2023-05-02 10:19:53 +02:00
Michael Kaufmann
c56e0b9dac add 'Passing HTTP AUTH BASIC' header option when using FCGID; fix typeerror in parameter for Froxlor\Dns\Dns; require php-gd extension for validating uploaded images
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2023-03-08 09:33:02 +01:00
Maurice Preuß (envoyr)
3b753aa69d change session/cookie domain value, this prevents using the _ server_name when using nginx
Signed-off-by: Maurice Preuß (envoyr) <envoyr@froxlor.org>
2023-01-25 18:50:49 +01:00
Maurice Preuß (envoyr)
1f1ea370c0 add version to mix-manifest.json and add mix function
Signed-off-by: Maurice Preuß (envoyr) <envoyr@froxlor.org>
2023-01-14 21:14:55 +01:00
Michael Kaufmann
cc6d8d5f8b fix login if non-standard ports are used for froxlor vhost
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2023-01-10 12:43:04 +01:00
Michael Kaufmann
f2485ecd9a adjust Request-class methods to be more flexible
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-12-30 21:43:27 +01:00
Maurice Preuß (envoyr)
1b63534563 update csrf initialization
Signed-off-by: Maurice Preuß (envoyr) <envoyr@froxlor.org>
2022-12-26 14:12:21 +01:00
Maurice Preuß (envoyr)
6ad78a4818 add csrf token header to jquery requests 2022-12-25 22:14:39 +01:00
Michael Kaufmann
4d908ff6ee fix session-timeout not being set
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-12-08 10:05:44 +01:00
Michael Kaufmann
34e3290497 adding csrf-token to all forms
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-12-08 09:33:34 +01:00
Michael Kaufmann
4eaf9d2c46 add new graphics/logos; theme dependent logos; layout fixes in forgot-password/reset-password sites;
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-12-04 13:18:33 +01:00
Michael Kaufmann
13c53b074c show search-text on listings with link to remove set filter
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-10-02 10:35:43 +02:00
Michael Kaufmann
8f64460647 set new beta version for the new major release this year
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-08-25 21:49:26 +02:00
Michael Kaufmann
94a19ee2b6 more minor fixes and code-cleaning
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-08-10 12:01:26 +02:00
Michael Kaufmann
31500522ce make froxlor_master_cronkjob a froxlor-cli command; secure files/folders in froxlor-virtualhost;
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-08-09 15:49:44 +02:00
Michael Kaufmann
293c0ceb9d move needed view() function declaration above first potential usage
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-07-31 16:45:05 +02:00
Michael Kaufmann
fef416ce84 fix show-version check on login/footer-template
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-05-20 14:50:51 +02:00
Michael Kaufmann
6116dda9bb more language migrations
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-04-29 10:01:58 +02:00
envoyr
4f4c71d79b major refactoring of almost all files 2022-04-28 20:48:00 +02:00
envoyr
da89315a10 fix view function in init and update dirname level in install 2022-04-28 16:57:35 +02:00
envoyr
5d08d5235d major changes in language management and installer 2022-04-28 16:49:11 +02:00
Michael Kaufmann
ba0d33392c 2fa template migration; fix menu-active-state; removed unused code from UI/HTML-class
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-03-18 11:41:07 +01:00
Michael Kaufmann
164b46ece3 get rid of session variable in URL
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-03-14 22:51:59 +01:00
Michael Kaufmann
c2ec309a01 more work on tablelisting
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-02-25 09:52:35 +01:00
envoyr
1e4da4850e hardening requests 2022-02-20 18:30:57 +01:00
envoyr
e057314795 update templates introduce request helper 2022-02-20 18:00:59 +01:00
envoyr
424a00b39e update api and ajax handling and response 2022-02-20 11:38:08 +01:00
envoyr
36dbb3bdcc set minimum php version to 7.4 and fix templates 2022-02-18 18:50:45 +01:00
Michael Kaufmann
28526b4544 add change pwd|lang|theme; twig-ify standard_error()
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-02-17 22:03:09 +01:00
Michael Kaufmann
181fa96431 first work on dashboard template (admin and customer)
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-02-17 12:01:54 +01:00
envoyr
a4d6d183ff update base structure 2022-02-16 20:29:42 +01:00
Michael Kaufmann
759d11d1a0 add userarea-layout + sidebar and topmenu
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-02-16 14:54:06 +01:00
Maurice Preuß
f7db5497af 0.11 dev (#1010)
* update layout and bootstrap package

* update templates

Co-authored-by: Michael Kaufmann <d00p@froxlor.org>
2022-02-16 09:57:17 +01:00
Michael Kaufmann
407a1daebf first non-install template (login); mostly testing
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-02-15 20:37:27 +01:00
Michael Kaufmann
f37d9d000c make selecting the used OS actually do something (load default-setting-adjustments required/needed; TBD)
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-02-15 15:43:18 +01:00
Michael Kaufmann
56a9a71248 preparing for re-design using new template-engine for future 0.11.x releases
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2022-02-15 11:18:19 +01:00
Michael Kaufmann
21983f27b6 secure commonly used filename-variable against url manipulation
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2021-08-25 16:36:09 +02:00
Michael Kaufmann
4b22470872 set php session security related settings (correctly in every case)
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2021-08-25 16:21:33 +02:00
Stefan Weil
09038ac7aa Fix some typos (found by codespell) (#969)
Signed-off-by: Stefan Weil <sw@weilnetz.de>
2021-07-31 09:51:54 +02:00
Michael Kaufmann
1d903770fc have more power over theme logo, custom theme logo and uploaded logo; refs #958
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2021-07-20 20:35:54 +02:00
Daniel Schmitz
518ec202ab wip 2021-07-07 13:26:15 +08:00
Daniel Schmitz
c69ef20b17 wip 2021-06-23 10:58:52 +08:00
Michael Kaufmann
82922f7aea add new settings for legal-notes; terms-of-use and privacy-policy; fixes #930
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2021-03-24 14:36:48 +01:00
Michael Kaufmann
21925f48c3 set minimum required php-version to 7.1 and recommended php-version to 7.4
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2021-01-06 13:36:35 +01:00
Michael Kaufmann
ea76ce8fcc secure requests; refs #893
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2020-10-31 15:57:59 +01:00
Michael Kaufmann
edc702dafa check for required min version of php every time (frontend and cron), fixes #833
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2020-05-08 10:03:01 +02:00
Michael Kaufmann
557b28a69d more php-7.4 compatibility
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2019-10-08 12:08:36 +02:00
Michael Kaufmann
5dfb74701c improve error message display on missing vendor-folder
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2019-06-25 11:10:32 +02:00