 Thijs Kinkhorst
|
8f8a7ea706
get_magic_quotes_* functions deprecated in PHP 5.3.x. Check for
|
17 lat temu |
|
pdontthink
|
642f901396
A few output elements are used often, so just retrieve them once and make them globally available
|
17 lat temu |
|
pdontthink
|
a5ae8eddb5
Comment and linguistic fixes
|
17 lat temu |
|
pdontthink
|
55de62d7d3
Adding debug mode to core. Please run the configuration utility once after retrieving this update. Note that this update includes a change that makes it possible to use SquirrelMail constants in the configuration file(s).
|
17 lat temu |
|
pdontthink
|
23efc6b619
Fixed mailto: again. Should work with all the cc, bcc, subject parameters as well. Sample Windows registry entry for HKEY_CLASSES_ROOT\mailto\shell\open\command is "C:\Program Files\Mozilla Firefox\firefox.exe" "http://example.org/webmail/src/mailto.php?emailaddress=%1" or "C:\Program Files\Internet Explorer\IEXPLORE.EXE" "http://example.org/webmail/src/mailto.php?emailaddress=%1"
|
17 lat temu |
|
pdontthink
|
990a2741a3
Allow custom session handlers to work correctly (and be defined at the application level with SquirrelMail) -- TODO: Cannot forget to add info about this to the docs!
|
17 lat temu |
|
pdontthink
|
68a5991e02
Add note that config_override should probably be removed pending previous noted fix
|
17 lat temu |
|
pdontthink
|
e932e013ab
Add note about erroneous hook placement - PLEASE read the comment and reply if you have any input
|
17 lat temu |
|
pdontthink
|
b0dbc77d53
Minor wording and spacing fixes
|
18 lat temu |
|
pdontthink
|
b80d382d2a
Make sure to use correct template set after login
|
18 lat temu |
|
pdontthink
|
13d8258aec
Make session restore work in compose_in_new. Cannot do login session reset until after correct session has been started once.
|
18 lat temu |
|
pdontthink
|
a8acce202c
Finally fix up session restore functionality. Move session handling from login.php into init.php and fix the mess in redirect.php. There are some important notes that need to be reviewed in redirect.php, which I am including here to get your attention: FIXME! IMPORTANT! SOMEONE PLEASE EXPLAIN THE SECURITY CONCERN HERE; THIS session_destroy() BORKS ANY SESSION INFORMATION ADDED ON THE LOGIN PAGE (SPECIFICALLY THE SESSION RESTORE DATA, BUT ALSO ANYTHING ADDED BY PLUGINS, ETC)... I HAVE DISABLED THIS (AND NOTE THAT THE LOGIN PAGE ALREADY EXECUTES A session_destroy() (see includes/init.php)), SO PLEASE, WHOEVER ADDED THIS, PLEASE ANALYSE THIS SITUATION AND COMMENT ON IF IT IS OK LIKE THISsvn diff include/init.php src/login.php src/redirect.php src/compose.php WHAT HIJACKING ISSUES ARE WE SUPPOSED TO BE PREVENTING HERE?
|
18 lat temu |
|
pdontthink
|
af9ab09c24
Fix mixup of session restore location
|
18 lat temu |
|
pdontthink
|
35bd284200
No longer store all message composition sessions in the PHP session, since it was not made use of and in rare cases, made sessions too big. Composition restoration functionality now correctly restores attachments.
|
18 lat temu |
|
pdontthink
|
d743d173d6
Move inclusion of strings.php much higher in init process; beside making sense, it is required for the prefs.php fix a couple day ago
|
18 lat temu |
|
pdontthink
|
fce1d4d3ac
Move prefs init above plugin stuff, make life easier for plugins hooked on config_override
|
18 lat temu |
|
pdontthink
|
f8e864200a
Load prefs for all page loads, no matter if user is logged in. This fixes some login page issues and seems fine when user isn't logged in, but please report problems I may not have seen in my limited testing.
|
18 lat temu |
|
pdontthink
|
4233e4f0b1
Avoid calling javascript check fxn if user is not logged in
|
18 lat temu |
|
Thijs Kinkhorst
|
c9ff9f9e14
use PAGE_NAME to switch on which page we are, rather than
|
18 lat temu |
|
Thijs Kinkhorst
|
c54face6b0
on second thought, revise r12527 to use one, generic constant
|
18 lat temu |
|
Thijs Kinkhorst
|
2d79bd2f50
Fix test for signout.php in the logged in check in init.php so it
|
18 lat temu |
|
Thijs Kinkhorst
|
dfbdae5943
replace preg_split without a regular expression with the
|
18 lat temu |
|
pdontthink
|
ee0444272e
Remove $version, use SM_VERSION constant instead
|
18 lat temu |
|
pdontthink
|
be5f8591fb
Fix: When session auto-start not enabled, undefined var notice for
|
18 lat temu |
|
Thijs Kinkhorst
|
f585138b19
replace CVS with SVN
|
18 lat temu |
|
stekkel
|
1eb04b2d99
Setting the SQSESSID cookie with path "/" to deleted caused failed logins
|
18 lat temu |
|
stekkel
|
5d6c8787b4
Remove sqsetcookieflush call
|
18 lat temu |
|
pdontthink
|
329e123b47
Always add $base_uri to templates
|
18 lat temu |
|
pdontthink
|
dad2f33916
Use checkForJavascrip() instead of $javascript_on
|
18 lat temu |
|
pdontthink
|
717be5c30c
Massive update to plugin system architecture. Please test! Not all core plugins are tested yet, please point out issues that need to be fixed. Please see http://marc.theaimsgroup.com/?t=116282394000001&r=1&w=2
|
18 lat temu |
