|
fd95a4e2e3
|
v3 hidden service export to disk + hostname file is auto generated by tor
|
2018-12-04 21:48:45 +01:00 |
|
|
c9cddc9f86
|
Username should be a prepared variable
|
2018-12-04 21:27:35 +01:00 |
|
|
d0710d3d20
|
Merge pull request #37 from DanWin/revert-35-patch-1
Revert " Disabling emulated parameters"
|
2018-12-04 21:13:51 +01:00 |
|
|
0fc4412404
|
Revert " Disabling emulated parameters"
|
2018-12-04 21:10:36 +01:00 |
|
|
ba71455ca5
|
Introduce DEFAULT_PHP_VERSION
|
2018-12-04 20:48:08 +01:00 |
|
|
4e163a7e2d
|
Fixed syntax error
|
2018-12-04 15:26:24 +01:00 |
|
|
c174251826
|
exim4 might interfere with postfix
|
2018-12-04 13:36:16 +01:00 |
|
|
4f059e66f7
|
Droped php7.2 systemd.service files
|
2018-12-04 13:29:17 +01:00 |
|
|
c651bb65c7
|
Add jounald.conf
|
2018-12-03 17:22:23 +01:00 |
|
|
6ee51f3d7e
|
removed stray mention of php7.2
|
2018-12-02 21:44:07 +01:00 |
|
|
22066309d5
|
Add login.defs file
|
2018-12-02 21:41:31 +01:00 |
|
|
363d1b31ad
|
Debian sid dropped php7.2 support - move to 7.3 only
|
2018-12-02 21:17:11 +01:00 |
|
|
2e0e69d605
|
We don't need apt repository translations
|
2018-12-02 19:31:26 +01:00 |
|
|
2149bc9fd8
|
update paragonie/sodium_compat dependency
|
2018-12-02 10:45:51 +01:00 |
|
|
7111fa3a65
|
Prevent httpoxy vulnerability in PHP applications
|
2018-11-29 20:56:39 +01:00 |
|
|
921c43122c
|
Merge pull request #35 from teikakki/patch-1
Disabling emulated parameters
|
2018-11-28 21:05:56 +01:00 |
|
|
cf8a6cde80
|
emulated params
|
2018-11-28 14:30:36 +00:00 |
|
|
1fc180752f
|
emulated params
|
2018-11-28 14:30:22 +00:00 |
|
|
4475e3b277
|
emulated params
|
2018-11-28 14:30:05 +00:00 |
|
|
6ffd291f12
|
emulated params
|
2018-11-28 14:29:46 +00:00 |
|
|
79774b5a1d
|
emualted params
|
2018-11-28 14:29:27 +00:00 |
|
|
b46d0c7ab0
|
emulated params
|
2018-11-28 14:29:13 +00:00 |
|
|
01af3c367d
|
emulated params
|
2018-11-28 14:28:49 +00:00 |
|
|
7ab640ea4b
|
emulated params
|
2018-11-28 14:28:36 +00:00 |
|
|
5753ca2cee
|
Disabling emulated parameters
Emulated parameters can be vulnerable to SQL injection.
Take also a look here: https://stackoverflow.com/questions/134099/are-pdo-prepared-statements-sufficient-to-prevent-sql-injection
|
2018-11-28 14:26:55 +00:00 |
|
|
36fc7103cb
|
Add hidden service v3 keygen and parser for base64 encoded secret keys
|
2018-11-25 14:36:28 +01:00 |
|
|
f0afbe14c9
|
Add sodium_compat composer dependency for v3 hidden_services
|
2018-11-24 14:56:24 +01:00 |
|
|
9de11a9722
|
Dropped PHP7.1 support and install composer
|
2018-11-24 10:38:59 +01:00 |
|
|
910381fee2
|
Removed php7.0 setup instructions
|
2018-11-19 21:23:34 +01:00 |
|
|
7d032f4955
|
Merge pull request #28 from jtesta/sshd_hardening
Hardened SSH Service
|
2018-11-19 21:20:43 +01:00 |
|
|
e4e59782ca
|
Disabled RSA host key type (because small keys are generated by default), as well as ECDSA (due to suspicions of NSA-compromised P-curves). Enabled only strong key exchange, cipher, and MAC algorithms. See https://www.sshaudit.com/ and https://github.com/arthepsy/ssh-audit.
|
2018-11-19 15:01:11 -05:00 |
|
|
41b33f2c51
|
Drop PHP7.0 support
|
2018-11-18 20:50:35 +01:00 |
|
|
db626a54a4
|
disable imap_open because of https://github.com/Bo0oM/PHP_imap_open_exploit
|
2018-11-17 10:15:15 +01:00 |
|
|
f4ca23336b
|
Add clamav virus scan to mails
|
2018-11-11 11:17:20 +01:00 |
|
|
bb21f9f10b
|
Reload disabled php versions since accounts can still be deleted
|
2018-10-28 09:31:00 +01:00 |
|
|
5f3dfefa02
|
Drop now redundant config
|
2018-10-28 09:07:20 +01:00 |
|
|
b69293ab6d
|
Dynamic supported versions on frontpage
|
2018-10-28 09:01:31 +01:00 |
|
|
58b5efb96c
|
Added suspend hidden service feature + disabled php7.0 for new accounts
|
2018-10-28 08:48:30 +01:00 |
|
|
1884f4b08b
|
php is .ini not .conf
|
2018-10-26 19:14:29 +02:00 |
|
|
9985ba4864
|
Add PHP7.3 support and let setup.php write initial config files
|
2018-10-24 19:59:02 +02:00 |
|
|
d5d7078776
|
Allow editing hidden service options
|
2018-10-22 21:45:08 +02:00 |
|
|
b80f30ac03
|
Ignore insecure 777 permissions set by users on logrotate
|
2018-10-21 10:44:23 +02:00 |
|
|
cfb19915b5
|
Optimized find query to only search within each users tmp directory
|
2018-10-20 21:08:44 +02:00 |
|
|
d9e496930d
|
Add HiddenServiceMaxStreams option and service_instances table
|
2018-10-20 20:44:10 +02:00 |
|
|
2cee59dc6f
|
Structure changes for future features
|
2018-10-20 18:20:27 +02:00 |
|
|
96efd92ab1
|
bump dbversion
|
2018-10-17 21:51:20 +02:00 |
|
|
1f2ff2176b
|
Save DB information in separate table
|
2018-10-17 21:50:20 +02:00 |
|
|
6eb068222c
|
Refactor DB foreign keys to auto_incrementing id instead of onion
Allows moving domains into separate table at a later stage
|
2018-10-16 21:09:16 +02:00 |
|
|
81c2364b7b
|
Better load distribution on multiple relays
|
2018-09-23 20:09:04 +02:00 |
|
|
acc8782043
|
Add privacy policy checkbox (required by GDPR)
|
2018-09-10 19:30:12 +02:00 |
|