Mario Vavti
991db280be
experimental new notifications - needs pconfig experimental_notif set to 1 for your channel to work.
2017-10-08 17:19:29 +02:00
git-marijus
98e0534984
Merge pull request #862 from waitman/patch-4
...
prevent 'my_address' being set with bogus info
2017-09-28 11:01:01 +02:00
zotlabs
9d7a88b40d
move the Link header initialisation from Router (where it does not really belong) to Webserver, where we do similar module specific initialisations prior to calling Router->Dispatch()
2017-09-25 23:14:02 -07:00
zotlabs
3648f9952c
typo
2017-09-24 17:08:38 -07:00
zotlabs
866dc9a9b3
For zot6, allow HTTP Signatures to be encrypted, as they may contain sensitive (envelope, metadata) information.
2017-09-24 16:46:52 -07:00
zotlabs
6bd35ef740
log the lack of http sig info
2017-09-21 18:29:41 -07:00
zotlabs
6e9e267b27
provide a space between link header params
2017-09-20 23:57:44 -07:00
zotlabs
24a9c3ba79
add more signature logging
2017-09-20 21:20:00 -07:00
zotlabs
7b060dff68
add HTTP link header to channel page, making it pluggable
2017-09-20 19:12:23 -07:00
Waitman Gobble
b3c805d7d0
prevent 'my_address' being set with bogus info
...
After a user has authenticated, it is possible to set my_address in $_SESSION to 'anything' using zid= parameter in URL - if user is authenticated then zid is never set. This change kills the authenticated switch if a person sends a new zid through for processing, which will trigger remote authentication.
2017-09-18 06:02:14 -05:00
zotlabs
b5966041be
more zot6
2017-09-13 20:40:01 -07:00
zotlabs
61f339a874
owa - first commit
2017-09-07 17:56:02 -07:00
zotlabs
d58f965b9a
some more prep work for Zot VI - some of this will need to be undone or at least re-arranged later but we need to bootstrap a test environment.
2017-09-04 22:35:54 -07:00
zotlabs
4adf2caaa6
Merge branch 'dev' of https://github.com/redmatrix/hubzilla into xdev_merge
2017-09-03 17:17:20 -07:00
zotlabs
db82d303e2
only validate headers that aren't "spoofable", which will be somewhat implementation dependent.
2017-09-03 17:12:42 -07:00
Mario Vavti
e935473c5c
add combined index for item.uid and item.item_unseen. this speeds up notifications by a magnitude.
2017-09-01 21:27:59 +02:00
zotlabs
ae8cdc3b42
some changes after testing server-to-server magic auth
2017-08-31 21:38:03 -07:00
zotlabs
6d87311394
now letsencrypt is creating a .htaccess file with re-write rules which kills most of our .well-known routes
2017-08-31 17:47:32 -07:00
zotlabs
f436ec6f21
some issues with mod_display on very first anonymous page visit (prior to any browser cookies being set)
2017-08-30 18:55:56 -07:00
zotlabs
18c57eeaa0
httpsig - return an array with all the different signing possibilities enumerated
2017-08-20 18:30:12 -07:00
zotlabs
f2589cc820
mv HTTPSig to core - so we can use it as an auth method
2017-08-17 22:43:24 -07:00
zotlabs
e9679d251c
more work on activitypub httpsignature verification
2017-08-14 22:40:29 -07:00
zotlabs
323ab3dba4
get rid of some more deprecated uses of $a
2017-03-28 17:00:44 -07:00
zotlabs
046e5e239f
remove obsolete app argument from load_pdl
2017-03-28 16:07:22 -07:00
zotlabs
a2e1019978
move db_upgrade to zlib
2017-03-23 21:49:20 -07:00
zotlabs
8783ccfd72
move admin permission decision out of the router - it is already provided in the module and the higher level check is causing some oembed redirect issues.
2017-02-25 16:22:09 -08:00
zotlabs
8897c5763a
typo
2017-02-15 10:55:53 -08:00
zotlabs
07d92796d2
provide HTTP header parser which honours continuation lines and despite the fact that continuation lines have been deprecated - as they still exist in the wild.
2017-02-14 20:57:14 -08:00
zotlabs
23303391e0
move dreamhost hack to plugin
2017-02-01 22:45:03 -08:00
zotlabs
8029f56d1c
router error reporting
2016-12-09 12:38:53 -08:00
Klaus Weidenbach
7b41839ea8
[TASK] Update Doxyfile and fix Doxygen errors.
...
Updated Doxyfile to include new folders.
Add a list for @hooks tags.
Fixed some parsing problems for Doxygen.
2016-10-13 11:27:23 +02:00
redmatrix
ce6e81c682
more backticks
2016-10-03 21:48:53 -07:00
redmatrix
884bb60c7d
document the SubModule class and provide an option to change where the submodule name is located in the url path
2016-09-06 16:40:38 -07:00
redmatrix
bedc7b7b69
use SubModule class for generalising submodules, move back to the zotlabs/module hierarchy
2016-09-05 18:11:00 -07:00
redmatrix
80e4338314
missing s
2016-07-26 19:28:28 -07:00
redmatrix
db176eec40
set App::$error on 404 so we don't get two 'Page not found.' page bodies.
2016-07-26 17:24:17 -07:00
redmatrix
f3eb9af046
more ZAT work
2016-07-14 19:43:47 -07:00
redmatrix
fb36561a68
force non-null sess_data
2016-07-11 13:27:44 -07:00
redmatrix
415a8d1e01
channel homepage not providing content when javascript disabled
2016-06-21 19:42:08 -07:00
redmatrix
212d8b6cfd
support cookie auth in Sabre DAV
2016-06-14 20:30:34 -07:00
redmatrix
dfb6255f59
more removal of reserved words from DB schemas
2016-05-31 17:50:47 -07:00
redmatrix
096fdfc61b
consolidate all the sys_boot functionality that is common between the web server and the cli daemon manager. Get rid of yet another global variable ($default_timezone) whilst doing so.
2016-05-26 16:33:01 -07:00
redmatrix
516c43ba15
more work associated with DBA and index.php shuffle
2016-05-24 17:54:45 -07:00
redmatrix
84ba6393ad
relocate index and db
2016-05-24 16:36:55 -07:00
redmatrix
ada26dd2cb
This explains it all. Don't set the domain when creating a cookie. You'll get a wildcard and sessions will break if you have multiple domains running hubzilla (or any php basic session based code).
2016-05-18 21:00:31 -07:00
redmatrix
f4b31dcb3a
Document what I know about the session regeneration issue. I'm really tired of fighting this darn thing. Sessions and cookies need to work.
2016-05-18 20:36:03 -07:00
redmatrix
c17b47518d
comment out session_regenerate until we get this sorted
2016-05-18 17:55:22 -07:00
redmatrix
1f7e6cae82
Revert "Revert "yet more session work""
...
This reverts commit 37d14f3a1d
2016-05-18 17:03:54 -07:00
redmatrix
37d14f3a1d
Revert "yet more session work"
...
This reverts commit 51edd472c2
2016-05-18 17:02:46 -07:00
redmatrix
20cb4130d4
support work for a long-term fix for issue #390 , essentially one can specify a theme:schema string anywhere a theme is input. It will be honoured unless an existing schema setting over-rides this behaviour. This should also be backward compatible but the theme selection code has been cleaned up slightly and there may be subtle differences in behaviour after this commit. On my site this required a page refresh as the first page load after this change was a bit confused.
2016-05-17 17:46:30 -07:00
