Commit Graph

204 Commits

Author SHA1 Message Date
Ralf Becker
ffc048d472 fix PHP 8.0 Fatal error unknown function get_magic_quotes_gpc 2021-03-21 18:27:09 +01:00
Ralf Becker
8a14301710 * Login: fix not working forced password reset 2020-07-30 15:17:41 +02:00
Ralf Becker
502d423885 fix PHP Warning: substr() expects parameter 1 to be string, array given 2020-07-10 11:08:38 +02:00
Ralf Becker
98a6a7a9b8 * Login page: use HTTP status code 401 for a failed login, so tools like fail2ban can recognice that 2020-07-04 08:18:31 +02:00
Ralf Becker
b7ed148371 * SAML: support joining a SAML account to an existing one, if configured in setup
notification of user does not yet work, as redirect on login page looses Api\Framework::message() :(
2020-06-11 16:03:54 +02:00
Ralf Becker
e3ede597dc * API: add SimpleSAMLphp for SAML/Shibboleth authentication and many more 2020-04-14 14:10:33 +02:00
Lucas Pouzac
a237ae0b99 Fix no automatic login 2020-02-13 09:27:52 +01:00
Ralf Becker
2776d215e2 * Login: RememberMe token for either automatic login or as 2. factor for 2-Factor-Auth 2019-08-03 18:37:18 +02:00
Ralf Becker
44a0079b9d new user security popup incl. 2FA and token revokation 2019-06-05 13:10:25 +02:00
Ralf Becker
7e5d5c3d97 only append cd=yes, if there is not already a cd value 2019-04-04 13:29:28 +02:00
Ralf Becker
fa148e4c89 move check_logoutcode to Api\Framework\Login, where it is used 2016-07-11 08:52:41 +02:00
Ralf Becker
eb07902d4e replace (login_)template_set="idots" with "default" 2016-05-09 09:15:05 +00:00
Ralf Becker
c15fcdfb52 WIP egw installs now without phpgwapi and allows to login 2016-05-02 22:26:40 +00:00
Ralf Becker
29e72a0bec remove since 14.x removed updates stuff 2016-02-28 13:41:08 +00:00
Ralf Becker
d39c2a71bf * Login/Password: handle forced password change on login page 2015-07-01 12:44:34 +00:00
Ralf Becker
01860bc469 * Mobile: fix redirect loop, if template_set was forced to something else then "pixelegg"
- refactored generation of framework object to egw_framework::factory used now in login.php and egw object
- using now $framework->template_dir for *.tpl files of template-sets
2015-05-27 14:01:32 +00:00
Ralf Becker
f96772a157 * Login: disabling cookie-enabled-check again, as it causes a redirect look under certain conditions and browsers 2014-09-23 08:04:46 +00:00
Ralf Becker
1cdc989f18 simple check and error-message, if cookies are not enabled, also changed famous "Your session could not be verified" to more understandable "Your session timed out, please log in again" 2014-09-10 08:27:13 +00:00
Ralf Becker
8f366aaf2f quiten "Couldnt find constant jdots_framework::LOGIN_TEMPLATE_SET" 2014-05-12 11:56:59 +00:00
Ralf Becker
74dd9f0e02 allow templates packed as apps to replace login screen template by setting it as default template (without setting it in header.inc.php) 2013-11-14 13:52:50 +00:00
Ralf Becker
c059a2cfa3 fix indention 2013-08-01 12:40:57 +00:00
Klaus Leithoff
a273f67df5 * API/Auth: when required by setup check password strength upon login; strength must be specified, and user must be allowed to change password 2013-04-04 11:12:27 +00:00
Ralf Becker
a709f6104f * Setup/API: translations are no longer installed in database, but loaded directly from lang-files into tree-level cache 2012-11-05 12:18:22 +00:00
Ralf Becker
6836518858 removed unnecessary refresh_table from update, as it makes problems with PostgreSQL 2011-03-14 17:50:22 +00:00
Andreas Stöckel
3e00917ddb Reversed most changes made for egw-stylite #8295, commited changes proposed by Ingo Ratsdorf 2011-02-04 14:26:48 +00:00
Andreas Stöckel
0f0e57f398 Got remote applications in the jdots template finally working as they should - this unfortunately required a lot of 'dirty' hacks, as egroupware had not been designed to do this. So e.g. there had to be a litte bit code added to the login page, which prevented it from redirecting to a page with a full framework rebuild. 2011-01-20 14:11:47 +00:00
Klaus Leithoff
ea97a9671b fix for Stylite Ticket#8044 -Message on loginscreen and home doesent have a default lang fallback as all other egroupware translations 2010-10-05 08:30:50 +00:00
Ralf Becker
307294c3b0 commiting the session, before redirecting might fix racecondition in session creation 2010-07-29 12:50:26 +00:00
Ralf Becker
34e0d6bd48 use egw::redirect_link() and removed html markup from password check 2010-06-06 19:11:51 +00:00
Ralf Becker
81f1aad90c add framework create trigger (cd=yes) to phpgw_forward urls 2010-06-03 06:03:18 +00:00
Ralf Becker
aca8b220df fixed problem pointed out by Nahuel Grisolia <ngrisolia@cybsec.com> 2010-02-13 02:57:22 +00:00
Klaus Leithoff
64050083d1 remove additional blanks/whitespace before and after username supplied by user at logintime (refer to Tracker#2234 2009-10-06 11:07:30 +00:00
Ralf Becker
2ac27f4ffd added onsite tbu/vcu res_id for aquisition type and backup 2009-10-06 10:13:06 +00:00
Ralf Becker
cdd5103888 fixing a few more PHP5.3 problems, caused by PHP5.3 behavior to NOT
register cookies in $_REQUEST any more by default (there's now a php.ini
variable 'request_order' to controll that, but we want to work with a
default configuraltion):
- session restore was not working, as only $_REQUEST[sessionid] was checked
- multi domain installs not working, as domain cookie was not checked
- encrypted session were not working, because kp3 cookie was not checked
--> there's now a static method egw_session::get_request($name), which
checks $_REQUEST[$name], $_COOKIE[$name] and for that Safari bug also
$_COOKIE[ucfirst($name)]
2009-08-22 19:32:28 +00:00
Ralf Becker
67913ad192 "Fix for bug #1891: CAS auth seems to fail" 2009-07-18 12:22:14 +00:00
Ralf Becker
10006c16ec "Fix for bug #1992 from Hans-Juergen Tappe:
The sitemgr login module does not cleanup session."
2009-07-18 12:15:20 +00:00
Ralf Becker
232252475f patch fixing many depricated functions (eg. posix regular expressions) and features, which fill up the error_log under php5.3 (and will no longer be available under php6).
Patch is mostly created by script in egroupware/doc/fix_depricated.php in separate commit.
I do NOT advice to apply this patch to a production system (it's commited to trunk!), as the automatic modified regular expressions have a good change to break something ...
2009-06-08 16:21:14 +00:00
Ralf Becker
fde8fc7b27 CAS (Central Authentication Service) login for eGroupware 2008-11-15 10:54:39 +00:00
Ralf Becker
b599ae8d8b allow direct error messages instead of just error codes 2008-08-07 20:35:57 +00:00
Ralf Becker
5fe1dfd355 "removed 4. parameter on session::create() call" 2008-05-10 20:40:28 +00:00
Ralf Becker
53e075224c "patch #889: HTTP auth - support other mod_auth_* Apache modules
fixed handling of passwords with special chars, if magic_quotes_gpc is on"
2007-06-20 06:46:55 +00:00
Ralf Becker
7f8b7fb92f "fix loginscreen-message (was depending on * for not existing)" 2007-05-17 19:04:02 +00:00
Ralf Becker
7b6ef2c5d3 new login page using the framework class(es) 2006-12-25 11:06:22 +00:00
Cornelius Weiß
525abe5da6 fix http://www.egroupware.org/bugs?tr_id=199 2006-12-21 21:30:01 +00:00
Ralf Becker
e0e16ab18d fixed not working forward of not loged in users after login to the original address 2006-11-13 11:06:42 +00:00
Cornelius Weiß
6f70043f8d changed data representation of remember cookie 2006-10-16 21:10:00 +00:00
Pim Snel
b4dce58bf4 fallback to idots template set when login template set does not have login.inc.php
remove commented old tpl code
2006-10-15 20:07:02 +00:00
Pim Snel
c9482613a8 Seperation of login.php into: login logic, template set specific logic, and template with HTML
The active files are now:
egroupware/login.php
egroupware/phpgwapi/templates/idots/login.inc.php
egroupware/phpgwapi/template/idots/login.tpl
2006-10-15 16:19:19 +00:00
Pim Snel
f05140f303 add langcode to registration link 2006-10-10 21:49:13 +00:00
Ralf Becker
d6b7fc3c35 phpgw_setcookie --> egw_setcookie and removing old code - I have no idea what is was supposed to do 2006-09-27 07:10:43 +00:00