Commit Graph

97 Commits

Author SHA1 Message Date
Daniel Winzen
0f38bd2449 Improved privilege separation 2019-01-01 02:24:22 +01:00
Daniel Winzen
5cd13e9269 Introduced selection between v2, v3 and custom hidden service 2018-12-06 16:24:35 +01:00
Daniel Winzen
305c8bc0c3 Fix mariadb 10.3 compatibility by adding default values 2018-12-05 22:19:46 +01:00
Daniel Winzen
c9cddc9f86 Username should be a prepared variable 2018-12-04 21:27:35 +01:00
Daniel Winzen
0fc4412404 Revert " Disabling emulated parameters" 2018-12-04 21:10:36 +01:00
Daniel Winzen
ba71455ca5 Introduce DEFAULT_PHP_VERSION 2018-12-04 20:48:08 +01:00
teikakki
cf8a6cde80 emulated params 2018-11-28 14:30:36 +00:00
teikakki
1fc180752f emulated params 2018-11-28 14:30:22 +00:00
teikakki
4475e3b277 emulated params 2018-11-28 14:30:05 +00:00
teikakki
6ffd291f12 emulated params 2018-11-28 14:29:46 +00:00
teikakki
79774b5a1d emualted params 2018-11-28 14:29:27 +00:00
teikakki
b46d0c7ab0 emulated params 2018-11-28 14:29:13 +00:00
teikakki
01af3c367d emulated params 2018-11-28 14:28:49 +00:00
teikakki
7ab640ea4b emulated params 2018-11-28 14:28:36 +00:00
teikakki
5753ca2cee Disabling emulated parameters
Emulated parameters can be vulnerable to SQL injection.
Take also a look here: https://stackoverflow.com/questions/134099/are-pdo-prepared-statements-sufficient-to-prevent-sql-injection
2018-11-28 14:26:55 +00:00
Daniel Winzen
36fc7103cb Add hidden service v3 keygen and parser for base64 encoded secret keys 2018-11-25 14:36:28 +01:00
Daniel Winzen
b69293ab6d Dynamic supported versions on frontpage 2018-10-28 09:01:31 +01:00
Daniel Winzen
58b5efb96c Added suspend hidden service feature + disabled php7.0 for new accounts 2018-10-28 08:48:30 +01:00
Daniel Winzen
9985ba4864 Add PHP7.3 support and let setup.php write initial config files 2018-10-24 19:59:02 +02:00
Daniel Winzen
d5d7078776 Allow editing hidden service options 2018-10-22 21:45:08 +02:00
Daniel Winzen
d9e496930d Add HiddenServiceMaxStreams option and service_instances table 2018-10-20 20:44:10 +02:00
Daniel Winzen
2cee59dc6f Structure changes for future features 2018-10-20 18:20:27 +02:00
Daniel Winzen
1f2ff2176b Save DB information in separate table 2018-10-17 21:50:20 +02:00
Daniel Winzen
6eb068222c Refactor DB foreign keys to auto_incrementing id instead of onion
Allows moving domains into separate table at a later stage
2018-10-16 21:09:16 +02:00
Daniel Winzen
81c2364b7b Better load distribution on multiple relays 2018-09-23 20:09:04 +02:00
Daniel Winzen
acc8782043 Add privacy policy checkbox (required by GDPR) 2018-09-10 19:30:12 +02:00
Daniel Winzen
9eb5c2ae3c Show error message on login when account has not yet been created 2018-03-03 19:22:57 +01:00
Daniel Winzen
47b9b6e3a6 Fixed db query 2018-02-26 16:37:35 +01:00
Daniel Winzen
e8f8f42a24 Fix db query 2018-02-25 21:53:00 +01:00
Daniel Winzen
6b0759be73 Added admin panel + optional manual approval for new sites 2018-02-25 21:25:05 +01:00
Daniel Winzen
fa24bb61ec Added PHP 7.2 support + minor bugfixes and performance tweaks
Note when applying this update you will have to update existing nginx vhosts to match new listening addresses (IPv6). Preferably you should update them to unix socket though and apply the changes to the tor hidden service config as well
2018-02-10 22:10:07 +01:00
Daniel Winzen
c65055a9bb Set mysql host to % instead of localhost to allow connections to 127.0.0.1
Note, for updating an existing database, you should run the following:
UPDATE mysql.user SET host='%'; FLUSH PRIVILEGES;
2017-12-21 20:26:24 +01:00
Daniel Winzen
a9fd1b658c Use X-Accel-Redirect in log.php output 2017-12-03 12:48:37 +01:00
Daniel Winzen
99ccbdccfe Updated tutorial for Ubuntu 16.04 LTS compatibility 2017-11-05 10:43:44 +01:00
Daniel Winzen
20754f052f Update frontpage and FAQ texts 2017-09-03 14:15:55 +02:00
Daniel Winzen
6384f4929a Added text editor to FileManager 2017-09-03 11:09:07 +02:00
Daniel Winzen
6c6b6a689d Protect from zip-bombs 2017-08-07 21:15:13 +02:00
Daniel Winzen
06dce903dc cleanup tmp file 2017-08-07 21:05:58 +02:00
Daniel Winzen
5244f89340 Make file upload multiupload 2017-08-06 17:10:19 +02:00
Daniel Winzen
f549f6ddfb Added web based FileManager 2017-08-06 15:35:47 +02:00
Daniel Winzen
10542504e2 Add more to FAQ 2017-07-23 13:26:08 +02:00
Daniel Winzen
9fda236ad8 Add FAQ 2017-07-11 17:43:34 +02:00
Daniel Winzen
8c1ccf4af5 Use less echo 2017-07-11 17:18:35 +02:00
Daniel Winzen
94f0ae9cc6 Fix captcha on login page 2017-06-17 14:37:01 +02:00
Daniel Winzen
bee350cb4b Make notification email configurable 2017-05-13 18:11:02 +02:00
Daniel Winzen
f164927471 Add anything@your.onion aliases (for sending and receiving) 2017-05-01 17:42:58 +02:00
Daniel Winzen
e0b35fb943 Initial commit 2017-04-30 19:32:42 +02:00