Maurice Meyer
b1a06a8684
Removed spaces from empty lines
2017-07-20 16:22:46 +02:00
Lukas Metzger
ccc423291c
Fixing possible remote code executuin vulnerability introduced by commit
...
3bf4e2874a
Thanks to RedTeam Pentesting for pointing out this issue
2017-06-29 15:18:45 +02:00
Maurice Meyer
1d7086dc6c
Added drop and readd of foreign key on user ->userid ( #33 )
...
This fixes the issue that the upgrade seems to work but the change from permissions.user to permissions.userid is not applied because of the foreign key.
2017-03-08 11:23:15 +01:00
Lukas Metzger
5c9f0da3aa
Adding unique constraint on update
2017-02-19 12:52:40 +01:00
Lukas Metzger
77fa9a926d
Fixed upgrade
2017-02-19 12:10:53 +01:00
Lukas Metzger
a105edc4ab
Fixed whitespace errors, removed unneccessary tables
2017-02-05 17:12:38 +01:00
lamclennan
61d7ea9a51
Final Fixes
2017-01-08 14:34:35 +10:00
lamclennan
d9f4b20448
Updated upgrade scripts for MySQL
...
Renamed the user table to users and added a unique key to it so
duplicate users can't be created.
Upgrade scripts delete duplicates and keep the lowest id (which is what
would have been used for authentication anyway, i.e. other users were
useless).
Added upgrade script to put domains names and records names to lower
case text as is required by postgres.
2017-01-08 14:15:31 +10:00
lamclennan
b9efd906e5
Postgres SQL Fixes
...
A few commands changed to suit postgres and the "user" table.
2017-01-08 02:51:16 +10:00
lamclennan
47f3f9939e
Bugs
...
Fixed a few code bugs. Added text to strip whitespace from records (i.e.
name, master, email)
2017-01-07 23:59:03 +10:00
lamclennan
5d5f8c4af7
Added some trimming around some VARCHAR records
2017-01-07 20:29:36 +10:00
lamclennan
7972a197ee
PDO Conversion
2017-01-07 20:18:39 +10:00
lamclennan
1aaa24280f
Started Work Again
2017-01-07 18:37:13 +10:00
lamclennan
3bf4e2874a
PDO Conversion/Pg Support Started
...
Early commit.
2016-12-13 08:19:00 +10:00
Maurice Meyer
788c0d1d19
Added pagination ( #19 )
...
* Added initial functionality for pagination
* Display of pagination now works for total page number greater than 8. Note that the actual pagination is not yet implemented
* Pagination is now functional and loads the requested sites
* Added cursor pointer to pagination
* page parameter is now set to 1 if not a number or smaller than 1
* page parameter is now checked with isset to prevent errors if it is not supplied
* Changed default number of domains per page to 15
* Added isset check to $input->page to prevent errors if it is not set
2016-06-07 19:00:35 +02:00
Alexander Dormann
dc8fab4d42
Implement ONLY_FULL_GROUP_BY compatibility ( #15 ) ( #16 )
...
SQL92 requires that all columns (except aggregates) in the select clause
is part of the group by clause. SQL99 loosens this restriction a bit and
states that all columns in the select clause must be functionally
dependent of the group by clause.
This commit fixes all partial GROUP BY queries to be compatible with
SQL92. Previously, when MySQLs sql_mode included ONLY_FULL_GROUP_BY,
aggregating queries failed, resulting in an empty domain listing.
2016-05-14 12:03:06 +02:00
Lukas Metzger
c72806708b
Removed unneccessary debug output
2016-05-06 18:15:15 +02:00
Lukas Metzger
3a3855e939
Added functionality for native zones
2016-05-03 17:42:34 +02:00
Maurice Meyer
ab84439c1a
Fixed the getIP command so that the clients IP is always returned, even behind multiple proxies.
...
Fixed indentation.
2016-04-20 14:59:06 +02:00
Maurice Meyer
c7ff6326ee
Changed the GetIP command of the API so that it returns the X-Forwarded-For header if it is set
2016-04-19 18:19:37 +02:00
Lukas Metzger
869ba131ef
Added getIp action to remote.php
2016-03-26 13:11:02 +01:00
Lukas Metzger
e894493cd1
Changed databaseschema for newer pdns versions
2016-02-14 12:44:53 +01:00
Lukas Metzger
4fb70354ce
Updated database schema with additional foreign keys and ON DELETE CASCADE to secure consistency
2016-02-10 17:06:56 +01:00
Lukas Metzger
3ce4af18af
Fixed bug when deleting domain
2016-02-07 18:48:05 +01:00
Lukas Metzger
0ed2a3dfa1
Fixed bug in installer
2016-02-06 20:11:01 +01:00
Lukas Metzger
6d93cbd628
Added upgrade.php and version checks
2016-02-06 13:23:28 +01:00
Lukas Metzger
d13ea918cc
Added remote.php API now working
2016-02-06 11:28:27 +01:00
Lukas Metzger
31b1a8d55f
Added user interface functions for adding remote permissions
2016-02-05 17:14:49 +01:00
Lukas Metzger
a37a616967
Fixed bug in install.php
2016-02-02 21:05:37 +01:00
Lukas Metzger
f628e147cd
Added csrf protection
2016-01-29 16:52:23 +01:00
Lukas Metzger
243e9b045f
Added more protection against session theft
2016-01-29 15:39:40 +01:00
Lukas Metzger
4e753118b9
Added installer
2016-01-25 19:39:25 +01:00
Lukas Metzger
1f59e8e87c
Disallowed user creating a new domain
2016-01-25 18:36:55 +01:00
Lukas Metzger
ea9868f908
Added function of password.php
2016-01-25 17:15:27 +01:00
Lukas Metzger
8df9c384c3
Added permission managment
2016-01-24 20:23:20 +01:00
Lukas Metzger
386480890b
Added edit-user.php, no permissions yet
2016-01-24 17:58:04 +01:00
Lukas Metzger
54c00cbe8b
Added function of users.php
2016-01-24 17:01:32 +01:00
Lukas Metzger
9db78f23df
Added add-domain.php
2016-01-24 15:13:33 +01:00
Lukas Metzger
fe77022836
Fixed ttl update bug in soa edit
2016-01-23 21:23:47 +01:00
Lukas Metzger
3f8156939e
Added function to delete a complete domain
2016-01-23 20:38:01 +01:00
Lukas Metzger
17e3cf908d
Added working implementation for edit-master.php, validity checks are required
2016-01-23 17:05:13 +01:00
Lukas Metzger
5b23d5ae95
Enabled fetching of soa data
2016-01-20 21:48:17 +01:00
Lukas Metzger
dfab14b517
Added record table to edit-master.php, working inclusive filter and data
2016-01-20 20:46:14 +01:00
Lukas Metzger
818cb9fbc5
Fixed possible bux if multiple persons can acces one domain
2016-01-16 16:25:56 +01:00
Lukas Metzger
9415367dfb
Checked permissions when retriving domains
2016-01-16 16:13:14 +01:00
Lukas Metzger
a3ebd21541
Implemented domain overview, permissions are still ignored
2016-01-16 15:46:43 +01:00
Lukas Metzger
dbdda4e2cb
Initial commit working login mechanism
2016-01-15 21:17:21 +01:00