355 Commits

Author SHA1 Message Date
Florian Schlichting
4410d7e94a dont put caldav.php in special URLs 2017-09-19 21:23:06 +02:00
Florian Schlichting
5f3aecfda4 Revert "Support http://.../freebusy.php?foo@example.com"
This reverts commit 38788acc5cbec147d6a46a6254ef8eec0a270c71, which
causes the following tests to fail (not return any FREEBUSY):

    tests/regression-suite/0832-freebusy.test
    tests/regression-suite/0836-freebusy.test
    tests/regression-suite/0837-freebusy.test
    tests/regression-suite/0888-GET-freebusy.test
2017-09-19 20:01:00 +02:00
Andrew Ruthven
38788acc5c Support http://.../freebusy.php?foo@example.com
Sometimes users set the Free/Busy URL to have a ?, not a /. Let's
support that.
2017-05-16 13:33:19 +12:00
Florian Schlichting
b1191bd83c caldav: leave some info about the exception we are catching 2017-04-28 17:43:13 +02:00
Florian Schlichting
bbea62d288 Merge branch 'server-array-upper' into 'master'
Convert array keys for $_SERVER to uppercase

See merge request !38
2017-04-24 21:59:08 +00:00
Jan Losinski
e97c9674e9 Convert array keys for $_SERVER to uppercase
It seems to be the case, that array indicies in $_SERVER are always
uppercase. Sadly I could not find any documentation of this but at
least with mod_php it is the case. Also a extensive search on github
projects seems to support this thesis.

On my installation the 'X-FORWARDED-PROTO' is even then uppercase when
its mixed case in the Header provided by the reverse proxy.

Signed-off-by: Jan Losinski <losinski@wh2.tu-dresden.de>
2017-04-13 03:00:36 +02:00
Florian Schlichting
06e20e5508 dont send early exceptions to the client only, leave a trace in the error log too 2017-04-08 16:43:21 +02:00
Florian Schlichting
4f72fdfea1 Bump davical version to 1.1.5, DB is at 1.3.2 2017-01-23 23:02:56 +01:00
Florian Schlichting
21b5f8bacf Update apache-davical.conf adding .well-known rewriting 2017-01-17 23:39:53 +01:00
Florian Schlichting
93bd6073b1 creating a DAVResource from "/ " loops a lot 2017-01-11 00:10:33 +01:00
Florian Schlichting
2c11535eb0 use secure URIs where possible 2017-01-08 15:48:52 +01:00
Florian Schlichting
2c0c65d08a add optional support for X-Forwarded-Proto etc (closes: #87)
Modify the relevant $_SERVER variables directly, as we're using them in
various places in davical and awl.
2017-01-06 16:06:11 +01:00
Florian Schlichting
55d15d2eed use https for retrieving current_davical_version (fixes #1) 2017-01-06 16:06:11 +01:00
Florian Schlichting
404d9ab449 fix remaining apigen errors (duplicate function names etc) 2016-12-30 08:54:24 +01:00
Florian Schlichting
eaef540766 replace RRule with RRule-v2 2016-12-30 08:54:14 +01:00
Florian Schlichting
eb7f2edc0c eliminate trailing whitespace, expand tabs 2016-12-30 08:52:44 +01:00
Christoph Anton Mitterer
70bd8cf0ce handle failing version check when allow_url_fopen is set to false (closes: #57) 2016-12-02 21:57:24 +01:00
Florian Schlichting
0901fd2756 Remove remaining references to $c->local_tzid (fixes #35) 2016-12-02 00:24:53 +01:00
Florian Schlichting
86447e31fe Set the same default timezone to Database and PHP 2016-12-01 19:17:22 +01:00
Florian Schlichting
bb8ae530f5 a helpful comment
(and a lot of whitespace cleanup)
2016-09-14 23:46:41 +02:00
Andrew McMillan
c5c0421caf Add /metrics.php to be scraped by Prometheus for monitoring. 2016-06-22 23:53:22 +01:00
Andrew McMillan
b85f8e79fe Fail better!
There's a long-standing annoyance about catching errors in the early
stages of startup - sometimes they seem to disappear nowhere and yet
nothing works.  This fixes at least part of that.
2016-06-22 23:26:24 +01:00
Florian Schlichting
0281a8d619 adapt to AWL function rename get_fields() -> awl_get_fields() 2016-06-13 22:02:47 +02:00
Florian Schlichting
fee15797f7 Check for PHP XML support in setup.php (see #91) 2016-06-01 22:40:46 +02:00
Florian Schlichting
f1595efb48 add the iSchedule administration helper to the menu to give it more visibility and testing
and only show 'List External Calendars' in one (the Admin's) menu
2016-01-08 14:54:19 +01:00
Florian Schlichting
af1707ef1d prepare for 1.1.4 2016-01-03 19:09:56 +01:00
Florian Schlichting
ffdc13183f remove database connection check before $c is available (closes #36)
My browser hides the error message behind the menu bar, that's why I'm
also adding a line break in the do_error() handler.
2016-01-01 23:54:01 +01:00
Florian Schlichting
bf733fca8e let admin.php without parameters redirect to index.php, and document restrict_setup_to_admin setting (fixes #55) 2016-01-01 21:55:32 +01:00
Florian Schlichting
bbc7ddef2f Apache 2.4 removed Order / Allow directives for new Require 2015-12-31 17:32:48 +01:00
Florian Schlichting
8e9eaa3410 fix issue #72 - 405 error when adding a new contact from Apple's Contacts
As can be seen from the reporter's debug output, the problem is that
the POST goes to .../?add-member, whereas davical expects / works with /
redirects to ?add_member (note the underscore). So we have davical treat
?add-member the same as ?add_member
2015-12-26 14:33:28 +01:00
Jim Fenton
32f4e2924f Merge branch 'itemfix' into 'master'
Fixed grouped Properties naming (e.g. Addresses: item1.ADR instead of just ADR) …

…that caused item1.ADR to be written to DB(address_address_adr) because it doesn't match ADR, fix works ofr every grouped Property (yet there is only ADR...)
Added VCard Property ORG as nondefault (because it takes more then one Value)
Fixed false handling of Properties that can have more than one value (e.g. ORG) where values are seperated by semicolons

See merge request !19
2015-12-11 01:27:48 +00:00
Jim Fenton
b95eade0b9 Update required version of AWL to 0.56 2015-12-10 14:04:01 -08:00
Frank O. Martin
ce379d3cf7 Removed favicon.ico work around 2015-11-19 19:41:16 +01:00
Cyril Giraud
642524d391 Extract translatable strings in upgrade.php + update according to Transifex translations. 2015-03-06 23:41:08 +01:00
Cyril Giraud
4a4b8f22da Forum link update without making translators to re-translate the whole help string (preg_replace). 2014-12-29 22:40:14 +01:00
Jim Fenton
a877ef47c5 Correct links to mailing list archives and bug report location 2014-11-22 22:10:40 -08:00
Jim Fenton
2029e24f1a Merge branch issue_20_localization into master 2014-11-20 22:33:08 -08:00
Florian Schlichting
bf4ade9b83 fix typo in setup.php 2014-10-20 23:05:54 +02:00
Cyril Giraud
5b5eba38ca Issue #20: setup.php and help.php fixed (to be reviewed) + translations updates. 2014-10-19 00:26:09 +02:00
Florian Schlichting
cbe63d3182 release 1.1.3.1, fixing a critical typo in htdocs/always.php :-( 2014-10-07 08:48:19 +02:00
Florian Schlichting
37e814c647 release 1.1.3 2014-10-07 00:58:47 +02:00
Andrew McMillan
1141a43089 Fixing and debugging. 2013-09-26 16:09:36 +02:00
Andrew McMillan
e49d3dd225 We will add a setting to disable the DAV header on non-OPTIONS requests. 2013-09-26 14:24:38 +02:00
Andrew McMillan
d0fffe490a Set the default timezone to the database as well as for PHP. 2013-09-26 14:24:08 +02:00
Christoph Anton Mitterer
ea1ca0be0c escape version string to prevent XSS for sure
* HTML escape the remotely retrieved version string printed to the HTML in order
  to prevent and attacks (if this would have been possible at all in 12
  characters).

The version string read from the davical.org webserver might be changed by an
attacker in order to perform XSS.
Even though this is highly unlikley (there are only 12 characters used) it's
better to HTML escape any such string that is printed to HTML.

This was originally reported at:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703290
2013-09-02 14:38:05 +12:00
Christoph Anton Mitterer
8e60bb3124 set line endings of most text files to LF
* Changed the end-of-line encodings of all non-Windows-related and non-autogenerated text files to use UNIX LF (lots of them had mixed LF/CRLF).

Conflicts:
	inc/caldav-PUT-functions.php
2013-09-02 14:37:23 +12:00
Andrew McMillan
cc8e6a0131 Release 1.1.2 2013-07-15 13:12:05 +12:00
Andrew McMillan
9e774b295a When we get here it is a Bad Request, not a Server Error. 2012-09-20 23:54:47 +12:00
Andrew McMillan
9d7d453211 Workaround client software with imperfect add-member implementations. 2012-09-20 23:35:21 +12:00
Andrew McMillan
7e51fa8541 Release 1.1.1 2012-07-11 08:39:11 +12:00