118 Commits

Author SHA1 Message Date
Andrew Ruthven
af458f9d90 Remove default expiry times, make 0 disabled. 2024-05-03 23:35:26 +12:00
Andrew Ruthven
5826f5c3cf Cache password credentials received, and if they succeed or fail.
This is intended to reduce the load on external authentication sources
as most (all?) CalDAV clients use HTTPBasicAuth to authenticate and
if an external source is used, every request we receive requires
external authentication. This can place a large load on those external
sources.

Closes #254.
2024-05-03 23:34:42 +12:00
Andrew Ruthven
aa35bc6e6d Require the latest DB version 2024-04-30 20:39:14 +12:00
Andrew Ruthven
658bd4e786 Use request ID 2024-03-11 00:41:37 +13:00
Andrew Ruthven
0a0c0a77cc Explicitly declare all class properties
PHP 8.2.0 has deprecated dynamic creation of properties.

This kind of warning message is displayed:

Deprecated:  Creation of dynamic property DAViCalSession::$login_failed is
  deprecated in /usr/share/awl/inc/Session.php on line 153
2024-02-29 00:43:50 +13:00
Andrew Ruthven
4ae36c132d Have a sensible default setting for the UserAgent 2024-02-18 01:51:56 +13:00
Andrew Ruthven
d7d19b906f Set external_refresh by default
Let's just set a sane default of 60 minutes.
2024-02-18 00:04:37 +13:00
Andrew Ruthven
dabe01657d Bump the AWL version here as well 2024-01-20 15:27:51 +13:00
Andrew Ruthven
d42c3dc186 Add PHP version check to setup.php 2024-01-20 15:27:51 +13:00
eppesuig
de29c6c6ee Better check for $_SERVER['PATH_INFO'] 2023-06-21 23:21:57 +00:00
Andrew Ruthven
43996a3297 Create .in and .out calendars on principal creation.
Closes #227
2023-02-05 13:04:09 +00:00
Andrew Ruthven
7a8c7b5b25 Convert loop_limit to a config item 2022-12-15 20:50:44 +00:00
Andrew Ruthven
042237b05d PHP 8.2 seems to set the timezone to UTC, always set Pacific/Auckland for testcases
Previously the logic only set Pacific/Auckland if the date.timezone setting
on the PHP ini files wasn't set. Let's just always set it if we're processing
the test suite.
2022-12-10 15:37:43 +13:00
Florian Schlichting
88670bfa39 release davical 1.1.11 2022-10-04 14:05:19 +02:00
Andrew Ruthven
836c715a1c Fix the version of AWL we want.
We do actually want 0.62.

Closes #253.
2022-02-13 01:21:17 +13:00
Andrew Ruthven
1c77febeb1 gmstrftime is deprecated in PHP 8.1
Switch to using gmdate. One benefit is that gmdate doesn't respect
the locale, so we don't need the logic to hardcode the month
in English.
2022-02-13 00:42:49 +13:00
Andrew Ruthven
f1a4dcee0c More fixes for PHP 8.1 2022-02-12 23:59:26 +13:00
Andrew Ruthven
5d56f6b5ea Allow "&'<> in passwords.
We had already allowed these when changing a password, but they were
being escaped when logging in. Closes #259.
2022-02-12 23:48:50 +13:00
Klaus M Pfeiffer
042ce5f076 add feature list_everyone (fixes #59) 2021-02-08 17:41:28 +00:00
Florian Schlichting
e2c6b927c8 HTTP_REFERER will usually be unset for caldav requests, prevent "Undefined index" warnings 2019-12-06 18:17:18 +08:00
Jim Fenton
a3acb770ac release 1.1.9.1: fix XSS function lost in rebuild of always.php 2019-12-03 16:35:08 -08:00
“Paul
c5891abc7f Introduce new global variable to control maximum size of carddav resources. 2018-08-30 17:23:12 +02:00
Florian Schlichting
05397d635c release 1.1.6 2018-01-12 00:15:36 +01:00
Florian Schlichting
3ba605288f release 1.1.6 2017-10-25 11:48:43 +02:00
Florian Schlichting
bbea62d288 Merge branch 'server-array-upper' into 'master'
Convert array keys for $_SERVER to uppercase

See merge request !38
2017-04-24 21:59:08 +00:00
Jan Losinski
e97c9674e9 Convert array keys for $_SERVER to uppercase
It seems to be the case, that array indicies in $_SERVER are always
uppercase. Sadly I could not find any documentation of this but at
least with mod_php it is the case. Also a extensive search on github
projects seems to support this thesis.

On my installation the 'X-FORWARDED-PROTO' is even then uppercase when
its mixed case in the Header provided by the reverse proxy.

Signed-off-by: Jan Losinski <losinski@wh2.tu-dresden.de>
2017-04-13 03:00:36 +02:00
Florian Schlichting
06e20e5508 dont send early exceptions to the client only, leave a trace in the error log too 2017-04-08 16:43:21 +02:00
Florian Schlichting
93bd6073b1 creating a DAVResource from "/ " loops a lot 2017-01-11 00:10:33 +01:00
Florian Schlichting
2c0c65d08a add optional support for X-Forwarded-Proto etc (closes: #87)
Modify the relevant $_SERVER variables directly, as we're using them in
various places in davical and awl.
2017-01-06 16:06:11 +01:00
Florian Schlichting
eb7f2edc0c eliminate trailing whitespace, expand tabs 2016-12-30 08:52:44 +01:00
Florian Schlichting
0901fd2756 Remove remaining references to $c->local_tzid (fixes #35) 2016-12-02 00:24:53 +01:00
Florian Schlichting
86447e31fe Set the same default timezone to Database and PHP 2016-12-01 19:17:22 +01:00
Andrew McMillan
b85f8e79fe Fail better!
There's a long-standing annoyance about catching errors in the early
stages of startup - sometimes they seem to disappear nowhere and yet
nothing works.  This fixes at least part of that.
2016-06-22 23:26:24 +01:00
Andrew McMillan
d0fffe490a Set the default timezone to the database as well as for PHP. 2013-09-26 14:24:08 +02:00
Andrew McMillan
0d47b81e48 Remove bug trace. 2012-07-09 01:16:46 +12:00
Andrew McMillan
2f82e69cfb Correctly test for repeated caldav.php in URL. 2012-07-08 11:58:58 +12:00
Andrew McMillan
55aefbecce Try to trace how we get caldav.php/ doubled in a path. 2012-06-30 16:03:25 +12:00
Andrew McMillan
2538835a12 Seems that change to output buffer flushing is problematic with zlib. 2012-06-14 13:36:15 +12:00
Andrew McMillan
46addb00fd Fix some final niggles with setup.php and spurious logged errors. 2012-05-30 23:04:10 +12:00
Andrew McMillan
724a549502 Fix thinko. 2012-05-14 22:26:17 +12:00
Andrew McMillan
47363b4f41 We should error 500 when we have an exception that isn't caught. 2012-05-14 20:54:43 +12:00
Andrew McMillan
4907d6992e A default timezone if there is not one set in the PHP configuration. 2012-05-03 19:12:22 +12:00
Andrew McMillan
9ee6f37d77 Make it possible to see output from /setup.php when DB is unavailable.
Also depends on some changes to AwlDbDialect/AwlQuery.
2012-04-22 10:01:40 +12:00
Andrew McMillan
3afa91be85 Don't try and initialize gettext unless it's installed. 2012-04-18 16:46:32 +12:00
Andrew McMillan
655f34aa27 Correct HTTP date formatting function. 2012-03-16 16:44:59 +13:00
Andrew McMillan
8d4dfb5d91 Handle HTTP date formatting for non-english locales (force English names). 2012-03-12 13:02:11 +13:00
Andrew McMillan
b50b2d82ea Force output buffers to be flushed, if they're turned on.
If output buffering is turned on, PHP can be a bit slack about sending
the data to the client before closing the connection with exit(). These
changes ensure we call ob_flush() before we leave.  We call @ob_flush()
so we don't get noisy warnings when output buffering is off...
2011-11-02 18:43:10 +13:00
Andrew McMillan
2127c294a3 Various small fixes preparing for release.
Correct logic for auto-creating addressbook for new user.
Fix non-creation of default addressbook.
Fix principal/collection edit to allow write of no privileges.
Fix collection edit timezone list to use new table.
Update davical & libawl version in always.php.
Regression test changes with update to davical.sql.
2011-09-25 22:29:31 +13:00
Andrew McMillan
d4e29a91b6 $_SERVERS['SERVER_PORT'] might not be set in some circumstances. 2011-09-22 13:46:26 +12:00
Andrew McMillan
9743c72c05 Fix DB version number and function mistakenly coded in always.php. 2011-09-12 14:36:56 +12:00