aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/OpenSim/Server/Handlers (unfollow)
Commit message (Collapse)AuthorFilesLines
2019-08-18Optimise account name validation.onefang1-7/+6
2019-08-18TODO++onefang1-0/+3
2019-08-18Various additions to the web account manager.onefang1-108/+406
Track if we are accessed via HTTP or HTTPS, and the server name. Track cookies. HEAD method. Various security clean ups. Force HTTPS for account.html. Poor mans Bobby Tables protection. Security token. Validate inputs. Looking up the DNS records for email domain name. Don't allow creation of accounts with god names, leave that for the console. Check if created user name exists already. Double check the passwords and emails. Error messages on dynamic pages. Various clean ups. TODO++
2019-08-17Implement HEAD in our simple web server.onefang1-2/+11
2019-08-17VArious additions to account manager.onefang1-19/+83
First and last names merged into one name. Is name two words check, a suprisingly effective spam blocker. Poor mans Bobby Tables protection. Various other input checking. Added account creation confirmation page. Some text and length tweaks.
2019-08-17Simple web server gets HTTPS.onefang1-1/+14
2019-08-13Beef up the web server a bit.onefang1-0/+37
Sanatize the path. Add support for Last-Modified, If-Modified-Since, and Cache-Control: no-cache. Teach the base server about more binary content types.
2019-08-11WebServerInConnector -> WebServerConnectoronefang1-2/+2
Just a name change.
2019-08-08Various clean ups.onefang1-69/+44
2019-08-07More account manager.onefang1-9/+56
Select with more parameters. Tables, with member accounts. Print the query values.
2019-08-07Testing MySQLRaw's SELECT.onefang1-0/+11
2019-08-07Swap out MySQLGenericHandler and swap in MySQLRaw.onefang1-9/+10
Smaller, simpler, works better.
2019-08-07The beginnings of an account management web page.onefang1-24/+183
Just some simple dynamic pages that don't actually do anything.
2019-08-06Maybe now we can properly count locals and hypergridders on the web page?onefang1-7/+4
2019-08-06Add actual grid stats to the web page.onefang1-8/+40
Except HGers, still trying to sort that one out.
2019-08-05More basic web server.onefang1-7/+46
2019-08-04Add a basic generic web server, and a login page, plus stubs for the other ↵onefang1-0/+107
basic pages. And update everyone to suit.
2019-08-02Another attempt at sorting out the auto group chicken and egg problems.onefang1-1/+2
Are you a local? Asking for a friend.
2019-05-19Move cache, config, logs out of tree, and various related clean ups.onefang1-6/+1
2019-05-19Dump OpenSim 0.9.0.1 into it's own branch.onefang46-243/+962
2016-11-07More caches directory fixes, including moving console history there.David Walter Seikel1-2/+2
2016-11-05More config path fixes.David Walter Seikel1-2/+2
2016-11-03Initial update to OpenSim 0.8.2.1 source code.David Walter Seikel50-609/+2564
2012-11-22If an asset POST does not contain well-formed XML, return a 400 (Bad ↵Justin Clark-Casey (justincc)2-3/+38
Request) HTTP status rather than simply dropping the request.
2012-11-21Add regression test for a good request made to the asset service post handler.Justin Clark-Casey (justincc)1-0/+84
Adds new OpenSim.Server.Handlers.Tests.dll to test suite
2012-11-14Added AssemblyInfos in the OpenSim.Server namespace dlls.Diva Canto1-0/+33
2012-11-02Add [AssetService] AllowRemoteDeleteAllTypes (default false).Justin Clark-Casey (justincc)2-15/+52
This allows a closed grid to delete asset types other than maptile remotely. Only operational if AllowRemoteDelete = true also. Defaults to false - do not enable if anybody other than you can make asset service requests.
2012-11-02Move check to allow only deletion of maptiles up to AssetServerDeleteHandler ↵Justin Clark-Casey (justincc)1-3/+14
from AssetService. This allows us to use a common check for both AssetService and XAssetService. It also allows future console commands to delete an asset. As before, deletion of maptile assets is not allowed remotely unless this is explicitly configured.
2012-10-24Get "save oar" and "save iar" to tell you in a more friendly manner if the ↵Justin Clark-Casey (justincc)1-0/+3
filename to save already exists, rather than exception throwing. Also changes ConsoleUtil.CheckFileExists to CheckFileDoesNotExist() since this is more meaningful in the context, even though it does result in double negatives.
2012-10-19Move PluginManagerBlueWall1-3/+5
Move PluginManager out to OpenSimFramework for general use
2012-10-06Added parts to manage repositories and plugin managementBlueWall1-0/+4
This is working - more testing to follow, then soem documentation
2012-10-03Add modular configuration for Robust connectorsBlueWall1-0/+61
We can provide modular ini for connectors... look for our configuration in the following places... 1) in the default ini/-inifile 2) in the named file (ConfigName) located in the configured directory (see Robust[.HG].ini [Start] section for ConfigDirectory) 3) in the repository named in the connector (ConfigURL) In this case, the file will be written into the configured directory with the specified See example connector/service @ https://github.com/BlueWall/SlipStream for testing.
2012-09-14Don't store the unnecessary VERSIONMIN. VERSIONMAX, METHOD or UserID ↵Justin Clark-Casey (justincc)1-0/+18
(present as column PrincipalID) parameters in the Avatars table. These are used to invoke avatar service calls but are not in themselves persistable avatar data.
2012-07-13Rather than instantiating a UTF8 encoding everywhere when we want to supress ↵Justin Clark-Casey (justincc)9-74/+61
the BOM, use a single Util.UTF8NoBomEncoding. This class is thread-safe (as evidenced by the provision of the system-wide Encoding.UTF8 which does not suppress BOM on output).
2012-06-30Removing unused handling of incoming create object by userID and itemID only.Justin Clark-Casey (justincc)1-48/+0
It appears this was never actually used since attachments were rezzed in other code. This was never available on remote simulator comms, only local.
2012-05-25In remote QueryAccess, also receive the actual status (true|false) instead ↵Justin Clark-Casey (justincc)1-2/+5
of always true no matter what the callee actually returned. This was due to two things 1) SimulationServiceConnector.QueryAccess was always looking to the outer result["success"]. But if a "_Result" map is returned (which is certainly the case right now), then the true success is _Result["success"], result["success"] is always true no matter what 2) If QueryAccess was false at the destination, then AgentHandlers.DoQueryAccess() was never putting this in the result. The default action of SerializeJsonString() is not to put false booleans in the JSON!!!, so this has to be explicitly set.
2012-05-24Make ISimulationScene.GetScene() used the more efficient region id for ↵Justin Clark-Casey (justincc)2-3/+3
lookup rather than the region handle.
2012-05-03Remove the somewhat misleading logging of the string length of some unknown ↵Justin Clark-Casey (justincc)3-4/+5
requests, as this appeared to be some kind of numbered error code. This brings these messages into line with similar messages that did not do this.
2012-05-03Implement optional name and description on http stream handlers so that we ↵Justin Clark-Casey (justincc)1-0/+2
can relate a slow request to what the handler actually does and the agent it serves, if applicable. This is most useful for capabilities where the url is not self-describing.
2012-04-27MapImageService: changed the event at which the map tiles are uploaded, ↵Diva Canto1-2/+2
because they were being uploaded before the region was registered with the grid
2012-04-27MapImage security issue. Compare strings instead of IPAddresses.Diva Canto1-1/+1
2012-04-27MapImage security issue: better error messagesDiva Canto1-3/+5
2012-04-27Amend to last commit: account for the existence of proxies.Diva Canto1-3/+32
2012-04-27MapImageService: added an additional security check for OSGrid and other ↵Diva Canto1-5/+43
grids like it.
2012-04-06Finish the implementation of GetUserInventory, even though it's still not used.Diva Canto1-13/+59
2012-03-27Send the config section name up to the service classes themselves ↵Diva Canto2-2/+2
(XInventory and Assets).
2012-03-22Comment out login parameters debug output accidentally included with c4b2d24Justin Clark-Casey (justincc)1-11/+13
2012-03-22Add llGiveInventory() test from object to object where both objects are ↵Justin Clark-Casey (justincc)2-1/+12
owned by the same user.
2012-03-21HG Friends: reroute the status notifications to the HGFriends service, so ↵Diva Canto2-0/+57
that they can scale better. They were previously being handled by the UAS; that is still there, but it's now obsolete and will be removed in a future release.
2012-03-21Removed extraneous debug messageDiva Canto1-1/+0
generated by cgit v1.1 at 2024-11-04 18:04:36 +0000