 Thijs Kinkhorst
|
8f8a7ea706
get_magic_quotes_* functions deprecated in PHP 5.3.x. Check for
|
17 years ago |
|
pdontthink
|
642f901396
A few output elements are used often, so just retrieve them once and make them globally available
|
17 years ago |
|
pdontthink
|
a5ae8eddb5
Comment and linguistic fixes
|
17 years ago |
|
pdontthink
|
55de62d7d3
Adding debug mode to core. Please run the configuration utility once after retrieving this update. Note that this update includes a change that makes it possible to use SquirrelMail constants in the configuration file(s).
|
17 years ago |
|
pdontthink
|
23efc6b619
Fixed mailto: again. Should work with all the cc, bcc, subject parameters as well. Sample Windows registry entry for HKEY_CLASSES_ROOT\mailto\shell\open\command is "C:\Program Files\Mozilla Firefox\firefox.exe" "http://example.org/webmail/src/mailto.php?emailaddress=%1" or "C:\Program Files\Internet Explorer\IEXPLORE.EXE" "http://example.org/webmail/src/mailto.php?emailaddress=%1"
|
17 years ago |
|
pdontthink
|
990a2741a3
Allow custom session handlers to work correctly (and be defined at the application level with SquirrelMail) -- TODO: Cannot forget to add info about this to the docs!
|
18 years ago |
|
pdontthink
|
68a5991e02
Add note that config_override should probably be removed pending previous noted fix
|
18 years ago |
|
pdontthink
|
e932e013ab
Add note about erroneous hook placement - PLEASE read the comment and reply if you have any input
|
18 years ago |
|
pdontthink
|
b0dbc77d53
Minor wording and spacing fixes
|
18 years ago |
|
pdontthink
|
b80d382d2a
Make sure to use correct template set after login
|
18 years ago |
|
pdontthink
|
13d8258aec
Make session restore work in compose_in_new. Cannot do login session reset until after correct session has been started once.
|
18 years ago |
|
pdontthink
|
a8acce202c
Finally fix up session restore functionality. Move session handling from login.php into init.php and fix the mess in redirect.php. There are some important notes that need to be reviewed in redirect.php, which I am including here to get your attention: FIXME! IMPORTANT! SOMEONE PLEASE EXPLAIN THE SECURITY CONCERN HERE; THIS session_destroy() BORKS ANY SESSION INFORMATION ADDED ON THE LOGIN PAGE (SPECIFICALLY THE SESSION RESTORE DATA, BUT ALSO ANYTHING ADDED BY PLUGINS, ETC)... I HAVE DISABLED THIS (AND NOTE THAT THE LOGIN PAGE ALREADY EXECUTES A session_destroy() (see includes/init.php)), SO PLEASE, WHOEVER ADDED THIS, PLEASE ANALYSE THIS SITUATION AND COMMENT ON IF IT IS OK LIKE THISsvn diff include/init.php src/login.php src/redirect.php src/compose.php WHAT HIJACKING ISSUES ARE WE SUPPOSED TO BE PREVENTING HERE?
|
18 years ago |
|
pdontthink
|
af9ab09c24
Fix mixup of session restore location
|
18 years ago |
|
pdontthink
|
35bd284200
No longer store all message composition sessions in the PHP session, since it was not made use of and in rare cases, made sessions too big. Composition restoration functionality now correctly restores attachments.
|
18 years ago |
|
pdontthink
|
d743d173d6
Move inclusion of strings.php much higher in init process; beside making sense, it is required for the prefs.php fix a couple day ago
|
18 years ago |
|
pdontthink
|
fce1d4d3ac
Move prefs init above plugin stuff, make life easier for plugins hooked on config_override
|
18 years ago |
|
pdontthink
|
f8e864200a
Load prefs for all page loads, no matter if user is logged in. This fixes some login page issues and seems fine when user isn't logged in, but please report problems I may not have seen in my limited testing.
|
18 years ago |
|
pdontthink
|
4233e4f0b1
Avoid calling javascript check fxn if user is not logged in
|
18 years ago |
|
Thijs Kinkhorst
|
c9ff9f9e14
use PAGE_NAME to switch on which page we are, rather than
|
18 years ago |
|
Thijs Kinkhorst
|
c54face6b0
on second thought, revise r12527 to use one, generic constant
|
18 years ago |
|
Thijs Kinkhorst
|
2d79bd2f50
Fix test for signout.php in the logged in check in init.php so it
|
18 years ago |
|
Thijs Kinkhorst
|
dfbdae5943
replace preg_split without a regular expression with the
|
18 years ago |
|
pdontthink
|
ee0444272e
Remove $version, use SM_VERSION constant instead
|
18 years ago |
|
pdontthink
|
be5f8591fb
Fix: When session auto-start not enabled, undefined var notice for
|
18 years ago |
|
Thijs Kinkhorst
|
f585138b19
replace CVS with SVN
|
18 years ago |
|
stekkel
|
1eb04b2d99
Setting the SQSESSID cookie with path "/" to deleted caused failed logins
|
18 years ago |
|
stekkel
|
5d6c8787b4
Remove sqsetcookieflush call
|
18 years ago |
|
pdontthink
|
329e123b47
Always add $base_uri to templates
|
18 years ago |
|
pdontthink
|
dad2f33916
Use checkForJavascrip() instead of $javascript_on
|
18 years ago |
|
pdontthink
|
717be5c30c
Massive update to plugin system architecture. Please test! Not all core plugins are tested yet, please point out issues that need to be fixed. Please see http://marc.theaimsgroup.com/?t=116282394000001&r=1&w=2
|
18 years ago |
