Commit graph

3200 commits

Author SHA1 Message Date
pdontthink
6de4d8ae69 Add password option widget 2008-12-19 08:33:56 +00:00
pdontthink
7e1056287d Add info option widget type 2008-12-19 00:12:54 +00:00
pdontthink
0a83e3fbf1 Place quotes around the real name portion of addresses when putting them on the compose form 2008-12-08 20:19:18 +00:00
Thijs Kinkhorst
b3d411ce07 also need to strip \r if we split on \n, otherwise the <pre> environment
will interpret each \r as an extra newline between lines.
2008-12-05 11:01:29 +00:00
pdontthink
03b26f2c81 Sync with 1.4.x wherein REQUEST_URI isn't always trustable under some PHP versions for use as our PHP_SELF variable value 2008-12-05 08:41:09 +00:00
pdontthink
7b7ec67401 Fix port detection (2388423) 2008-12-04 21:34:53 +00:00
pdontthink
7f8dd6cd77 Put info about the user/group of the web server in the configtest. Grabbing that info is implemented as a core function so plugins (such as ones that need to check SUID script permissions) can also make use of it. 2008-12-04 09:35:41 +00:00
pdontthink
5586070b94 Allow choice of line endings when downloading or decoding strings (bodies) 2008-12-04 07:13:09 +00:00
pdontthink
f56f39ada5 Fix improperly quoted href link addresses; closes XSS exploit exlained at CVE-2008-2379. Thanks to Secunia Research for reporting this issue. 2008-12-04 04:20:40 +00:00
pdontthink
7d285b51a0 Fix HTTPS detection under Windows IIS (#2318118) 2008-11-26 02:56:42 +00:00
pdontthink
57b9aba210 Thanks, Thijs: svn propset svn:keywords Id <file> 2008-11-21 19:32:02 +00:00
pdontthink
8e10f61512 Use sq_is_writable() 2008-11-21 02:51:13 +00:00
pdontthink
8776ac77d7 How about adding a space 2008-11-20 22:34:38 +00:00
pdontthink
ede29b2901 Er, is it "Id:"? 2008-11-20 22:33:34 +00:00
pdontthink
bf4627edd2 Add a functions file for file utility functions (say that 10 times fast) along with some new file functions 2008-11-20 21:46:12 +00:00
pdontthink
d7f614d31b Forgot @since info for sqsetcookie 2008-11-20 20:08:16 +00:00
pdontthink
4a76899c55 Minor spacing fix 2008-10-30 21:30:09 +00:00
pdontthink
60ff13d11e Allow control over white space wrapping of auto-generated SquirrelMail option widgets 2008-10-07 04:48:28 +00:00
pdontthink
36a6401ac7 Remove obsolete comments 2008-09-26 19:09:30 +00:00
pdontthink
cb1d5f52ff Make more readable; expose header replace parameter when setting cookies 2008-09-26 19:08:20 +00:00
pdontthink
cfcffdbead Use sqsetcookie(), not setcookie() 2008-09-24 19:58:23 +00:00
pdontthink
e4252c5bf3 Just fiddling. Give credit where credit is due. Template class header() function now supports the 'replace' argument. 2008-09-24 01:56:59 +00:00
pdontthink
d09583a7bf Relax restriction on image tag src URIs. Others PLEASE TEST (HTML mails with unsafe images). Per the developers mailing list, no one could show that there was any exploit here. Some code has been inserted here but commented out in case there is in fact some exploit - the code will filter image URI file extensions as before but for URIs that fail that test, SM will check the actual served content for legitimate image files (so dynamically generated images from .asp, .php, and other systems can be correctly displayed). 2008-09-11 01:32:56 +00:00
pdontthink
fa7436a9de Allow template sets to define what the content-type of their output is. 2008-09-10 03:04:14 +00:00
pdontthink
71d7e677ed Move options constants to constants include file 2008-08-26 06:40:25 +00:00
Thijs Kinkhorst
833746dca6 rework seed generation: this is something that really belongs in init.php
so do it there. Input enough random components from diferent dimensions,
so hard to predict.
2008-08-21 12:16:20 +00:00
Thijs Kinkhorst
1413ea0073 use our existing random seeder function 2008-08-21 11:33:11 +00:00
pdontthink
c0e02fd5d4 Fix subsequent PHP notices caused by last commit. Also note that incorrect server responses shouild be error-checked, but they are not, probably because that's indicative of more fundamental problems elsewhere. 2008-08-17 03:49:37 +00:00
pdontthink
5c2f2e7f89 Eliminate PHP notices. Thanks to Pablo Alvarez de Sotomayor Posadillo 2008-08-16 08:58:19 +00:00
Fredrik Jervfors
0885d1dcd7 Fix for phpDocumentor. 2008-08-02 16:50:06 +00:00
pdontthink
87f2ed82e7 Clarify language 2008-07-24 18:16:44 +00:00
pdontthink
ce0fb43635 Fix plugin names showing up as "INCOMPATIBLE" on configtest list 2008-07-22 04:47:52 +00:00
pdontthink
8523ca3d2c Allow a different server address for the POP server to be configured when using POP before SMTP 2008-07-19 17:27:54 +00:00
pdontthink
4a76bb288a Plugins have to be able to update the message cache if they manipulate messages 2008-07-11 09:15:16 +00:00
pdontthink
a8fb2585fa Give plugins something to work with 2008-07-11 08:01:46 +00:00
pdontthink
0b830c5620 Allow plugins to have buttons that don't need message selections to work on the mailbox list page 2008-07-11 07:41:14 +00:00
pdontthink
6c2c0ff29b FIXME 2008-07-10 08:43:49 +00:00
pdontthink
167a679501 FIXME 2008-07-10 08:43:04 +00:00
pdontthink
329525803a Guarantee outgoing addresses have a domain part 2008-07-09 19:25:40 +00:00
pdontthink
60517ef7fa Bring the left_main_after_each_folder hook to life 2008-07-09 08:46:36 +00:00
pdontthink
dd5b92c3f3 Don't use GLOBALS['xxx'] -- Doesn't matter, but let's remain with a consistent coding style 2008-07-09 06:55:51 +00:00
pdontthink
f5f1f8d4c0 Allow plugins to specify that other plugins are incompatible with it in the info() function - in the required_plugins array therein, the incompatible plugin name as array key and value of SQ_INCOMPATIBLE. See upcoming release of the add_address plugin for an example. 2008-07-04 08:41:31 +00:00
pdontthink
80fbae3768 Add ability to lookup entries based on fields other than nickname. Thanks to David Hardeman. 2008-07-02 07:33:27 +00:00
pdontthink
a0adab5050 Add error handling to abook db lookups 2008-07-02 03:30:03 +00:00
pdontthink
4005ca5222 Add ability to turn off edit list delete checkbox 2008-06-26 00:09:22 +00:00
pdontthink
cc981461ed Someone added some prefs hooks to the file-based prefs backend but never added them to the db-based one - fix that 2008-06-23 19:57:55 +00:00
pdontthink
4cb8795ffc Allow prefs plugins to fetch values such as FALSE, 0, '', '0', or other values that evaluate to boolean FALSE 2008-06-23 19:54:09 +00:00
pdontthink
327222434c Add clarifying docs 2008-06-20 07:57:38 +00:00
pdontthink
0ac7a4f2b2 Allow lookups by fields other than nickname; LDAP backend needs to have this implemented if poss 2008-06-19 01:07:37 +00:00
pdontthink
c60fed307d Let edit list users turn off the 'add widget'; add submit option type 2008-06-11 05:55:57 +00:00