Michael Kaufmann (d00p)
88ccf5b869
don't generate unnecessary php-related vhost-entries when php is disabled, thx to karstenk
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-06-14 07:29:38 +02:00
Michael Kaufmann (d00p)
5866293a25
add script to change ip-addresses in froxlor from CLI and updated corresponding settings. Helpful for VM-template installations or similar. Use at own risk; feedback is appreciated
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-06-13 13:45:23 +02:00
Michael Kaufmann
d2711889de
Merge pull request #359 from flokli/lng-typos
...
Fix language typos
2016-06-08 06:23:37 +02:00
Florian Klink
82af43f598
lng/english: unify upper/lowercase string in $lng['panel']
...
Some where lowercase, some uppercase. Especially in the Cancel/save case
this looked weird.
This patch changes all button labels to their uppercase form.
2016-06-07 22:36:45 +02:00
Florian Klink
7a36f5edac
lng: fix typo decending -> descending
2016-06-07 22:33:24 +02:00
Michael Kaufmann
480d21f555
Merge pull request #358 from ohader/SecDatabaseInformationDisclosure
...
[SECURITY] Information disclosure on database failures
2016-06-04 21:47:12 +02:00
Oliver Hader
2e7133d619
[SECURITY] Information disclosure on database failures
...
In case the database is not responding, e.g. due to "too many connections"
cut-off database credentials might be shown and system path be revealed.
In terms of security this is considered as information disclosure.
2016-06-04 20:41:03 +02:00
Michael Kaufmann
85f707af8a
Merge pull request #357 from yaplik/master
...
fix non-persistent XSS due inproper content escaping
2016-06-03 16:29:28 +02:00
Jiří Zapletal
970a119f23
fix non-persistent XSS due inproper content escaping
2016-06-03 16:20:34 +02:00
Stefan Heid
7faebbb197
BUGFIX: Cleaninstall fails due syntax error in froxlor.sql (missing comma) ( #356 )
2016-06-02 21:21:40 +02:00
Michael Kaufmann
08d505b308
Merge pull request #355 from Froxlor/dns-editor
...
Add full dns editor + powerdns to froxlor; fixes #53 , fixes #731 , fixes #1196 ,
2016-05-30 09:09:15 +02:00
Michael Kaufmann (d00p)
1b0649d0cf
replace CUSTOMER_TMP with the correct tmp-folder, depending what php-interface is being used
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-29 09:56:33 +02:00
Michael Kaufmann (d00p)
e5c16439e1
replace config-template-variables also in commands to be executed, e.g. used in proftpd ssl-cert generation command
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-29 09:41:38 +02:00
Michael Kaufmann (d00p)
151d8f8c5c
Merge remote-tracking branch 'origin/master' into dns-editor
2016-05-23 15:55:24 +02:00
Michael Kaufmann (d00p)
08563e9298
add more opcache-php.ini directives for php-fpm, fixes #1624
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-23 13:01:05 +02:00
Michael Kaufmann (d00p)
b51f0821cb
show scheduled backup and give customer the possiblity to abort the job
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-22 11:08:44 +02:00
Michael Kaufmann (d00p)
339d84736e
no quotation of dns data for powerdns
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-21 09:03:21 +02:00
Michael Kaufmann (d00p)
7ea1de2a92
allow defined non-existing entry for SRV target-value for real now, i guess
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-20 16:21:55 +02:00
Michael Kaufmann (d00p)
be373e278f
allow defined non-existing entry for SRV target-value
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-20 16:17:33 +02:00
Michael Kaufmann (d00p)
61eab6fd93
do not validate fqdn of SRV and TXT entries, as they might use underscores
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-20 15:56:06 +02:00
Michael Kaufmann (d00p)
c2b0714b4a
powerdns needs the 'whole' record (., e.g. sub.example.com)
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-19 13:49:22 +02:00
Michael Kaufmann (d00p)
5c1079e04b
Add change_date value to the pdns-record entries
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-19 12:09:04 +02:00
Michael Kaufmann (d00p)
257f65bd1b
add powerdns config-templates for distros
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-19 10:29:17 +02:00
Michael Kaufmann (d00p)
96ff346e54
fix powerdns-config template
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-19 09:28:46 +02:00
Michael Kaufmann (d00p)
076b6143ce
limit record length
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 15:55:20 +02:00
Michael Kaufmann (d00p)
1e3262d691
do not show dns-editor to customers if not allowed and they enter the URL manually
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 13:54:21 +02:00
Michael Kaufmann (d00p)
94af32fb82
Merge remote-tracking branch 'origin/master' into dns-editor
2016-05-18 13:40:41 +02:00
Michael Kaufmann (d00p)
1f63ea10a0
adjust install sql file for dnsenabled flag and db-version
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 13:39:46 +02:00
Michael Kaufmann (d00p)
fa60c17dbc
fix sql-query when editing a customer; check for dnsenabled flag in customer-domain-view template
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 13:32:44 +02:00
Michael Kaufmann (d00p)
b4c7fb574c
increase DB version for db-updates
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 13:27:56 +02:00
Michael Kaufmann (d00p)
83fa0059de
add flag to allow access to dns-editor per customer; clean up dns-entries when domain gets deleted
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 13:25:31 +02:00
Michael Kaufmann (d00p)
d97957e558
array short-syntax is only PHP >= 5.4
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 12:12:34 +02:00
Michael Kaufmann (d00p)
9d16790f5b
Update phpMailer to 5.2.15
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
0.9.36
2016-05-18 10:43:16 +02:00
Michael Kaufmann (d00p)
b14ab6b1c1
validate record/label in dns-editor; better escaping for soa-admin mail
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 10:35:47 +02:00
Michael Kaufmann (d00p)
b029fe113e
Merge remote-tracking branch 'origin/master' into dns-editor
2016-05-18 10:34:14 +02:00
Michael Kaufmann (d00p)
6ea4655fd8
set version to 0.9.36 for upcoming release
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 10:32:52 +02:00
Michael Kaufmann (d00p)
477c99b4de
Merge remote-tracking branch 'origin/master' into dns-editor
2016-05-18 10:31:05 +02:00
Michael Kaufmann (d00p)
eb70e619c9
also check for punycode when customer adds a subdomain
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 10:28:13 +02:00
Michael Kaufmann (d00p)
41e4135f71
do not allow punycode input in domain-names
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-18 09:03:14 +02:00
Michael Kaufmann (d00p)
1ce5cf6c00
various fixes for dns with froxlor-hostname
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-17 09:12:39 +02:00
Michael Kaufmann (d00p)
f7441df895
add missing file inclusion
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-17 08:43:02 +02:00
Michael Kaufmann (d00p)
69443d95d5
add support for power-dns (untested); most config-templates missing for pdns; create SPF/DKIM entries only if domain is emaildomain
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-17 08:30:02 +02:00
Michael Kaufmann (d00p)
11e923453e
Merge remote-tracking branch 'origin/master' into dns-editor
2016-05-16 19:59:27 +02:00
Michael Kaufmann (d00p)
b03eab897a
show a2enmod commands only when using apache, thx to d4n13L
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-05-16 18:41:01 +02:00
Michael Kaufmann
25ff78e295
Merge pull request #353 from nachtgeist/le
...
LE improvements, fixes #1597
2016-05-16 17:42:38 +02:00
Daniel Reichelt
6e2b1773a3
LE: support alias domains
...
LE CSRs are triggered for the aliasdomain target domain on
* domain deletion
* domain creation
* domain editing when
* the aliasdomain target changes (CSR triggered both for old and new
target)
* wwwalias is disabled or enabled
* letsencrypt is disabled or enabled (domain-local)
fixes #1597
2016-05-16 17:35:51 +02:00
Daniel Reichelt
f3e05742b5
LE: change semantics of setting.letsencryptreuseold
...
Previously setting.letsencryptreuseold determined wheter both a domain's
private key and a CSR should be re-generated.
Preparing support of alias domains in LE certificates, this is changed to
only determine the re-generation of the private key. CSRs now are always
re-generated.
2016-05-16 17:35:51 +02:00
Daniel Reichelt
001f10f74e
LE: catch error due to rate-limited account registration
...
and fix bad english in log message
2016-05-16 17:35:51 +02:00
Daniel Reichelt
712aebb864
LE: improve SQL readability
2016-05-16 17:35:51 +02:00
Daniel Reichelt
0ae0178b4c
LE: PSR-2 formatting
2016-05-16 17:35:51 +02:00