Commit graph

107 commits

Author SHA1 Message Date
Andy
4f2129a616
Merge branch 'trunk' 2025-04-01 23:14:53 -07:00
pdontthink
598a599ba3
Happy New Year 2025-01-03 11:47:03 -08:00
Andy
d79aab6762
Merge branch 'trunk' 2024-01-02 14:58:59 -08:00
pdontthink
39cfdaadfd
Happy New Year 2024-01-02 14:58:16 -08:00
Andy
ec52fd089c
Merge branch 'trunk' 2023-01-02 22:06:59 -08:00
pdontthink
380afc7213
Happy New Year 2023-01-02 22:04:25 -08:00
Andy
474f469a4a
Empty Strings Don't Need Cleanup
PHP 8.1 is a real stickler about this.
2022-02-28 19:11:03 -08:00
pdontthink
bcdfe6e9f1
Happy New Year 2022-01-26 01:06:50 -08:00
pdontthink
c4ef1a0eea
Happy New Year 2021-02-05 11:55:37 -08:00
pdontthink
fc283980d0
Happy New Year 2020-01-07 00:12:38 -08:00
pdontthink
fbcb1ca1f5
Happy New Year 2019-01-07 21:55:08 -08:00
pdontthink
23cd61b628 Happy New Year 2018-01-16 23:44:07 +00:00
pdontthink
9597f1a963 May as well grab offset info too 2017-11-10 02:39:26 +00:00
pdontthink
157e472108 Make server TZ available after it is changed 2017-05-02 19:55:46 +00:00
pdontthink
6cd24c0552 Happy 2017 2017-01-27 20:34:08 +00:00
pdontthink
2934017d92 Happy New Year 2016-01-01 20:59:53 +00:00
pdontthink
3b465a0d0f Happy 2015 2015-01-03 04:09:49 +00:00
pdontthink
581dc23061 Happy 2014 2014-01-01 20:33:20 +00:00
Fredrik Jervfors
c076a1f1ae Update copyright 2013-07-26 17:31:02 +00:00
Thijs Kinkhorst
efd75f4867 Replace calls to htmlspecialchars() with sm_encode_html_special_chars().
New function sm_encode_html_special_chars() encodes HTML special
characters by calling htmlspecialchars(). It sets the character set
to ISO-8859-1, to fix compatibility with PHP >= 5.4.

Patch by Paul Lesniewski.

See #3491925
2012-12-09 12:06:30 +00:00
pdontthink
209efe7644 Separate E_STRICT reporting from E_ALL in internal debug mode (E_STRICT is included in E_ALL only as of PHP 5.4.0) 2012-07-28 05:57:50 +00:00
pdontthink
acc409fb2a Updating copyrights. Happy New Year. 2012-01-02 02:09:17 +00:00
pdontthink
fc57bf2b59 Happy New Year! 2011-01-06 03:16:21 +00:00
pdontthink
b1e39e16f1 Aggressive sanitizing of REQUEST_URI, PHP_SELF, and QUERY_STRING corrupted page URIs by encoding ampersands in the query string, so we have to un-sanitize ampersands. Will this cause any security/XSS issues? 2010-06-26 10:15:49 +00:00
pdontthink
b786dff83a Avoid notices in some environments 2010-01-27 23:36:52 +00:00
pdontthink
e4c71602cd REQUEST_URI is used in php_self(), so make sure it's sanitized too 2010-01-27 23:05:18 +00:00
pdontthink
7aa0e60863 Update copyrights to 2010 2010-01-25 03:23:30 +00:00
Fredrik Jervfors
134d462c94 The copyright symbol isn't really needed since the word "copyright" is there. Also it doesn't display right in the documentation. 2009-09-29 12:15:33 +00:00
pdontthink
585c624f80 Implemented page referal verification mechanism. (Secunia Advisory SA34627) 2009-08-12 08:20:46 +00:00
pdontthink
7e85ed842b Fixed improper sanitizing of PHP_SELF and the lack of sanitizing of QUERY_STRING server environment variables. Thanks to Niels Teusink and Christian Balzer. (CVE-2009-1578) 2009-05-11 21:49:23 +00:00
pdontthink
7d285b51a0 Fix HTTPS detection under Windows IIS (#2318118) 2008-11-26 02:56:42 +00:00
pdontthink
d01c63496a The random number seed generator was creating float values that, when fed to mt_srand(), which expects an integer, were seen as zero on some systems because it was such a large number. This fix takes a sub-string of the seed's MD5 before converting it to an integer in order to fix that problem. 2008-11-20 22:32:32 +00:00
pdontthink
bf4627edd2 Add a functions file for file utility functions (say that 10 times fast) along with some new file functions 2008-11-20 21:46:12 +00:00
pdontthink
f211155993 Add global variable indicating server OS 2008-11-20 20:05:35 +00:00
pdontthink
9682ef20f6 Add native output buffering capability. 2008-09-24 03:24:08 +00:00
pdontthink
5ab583832d Fix session autostart code - session_name() return value does not indicate session has started; Remove dead code (cookie cleanup) 2008-09-23 01:12:29 +00:00
pdontthink
2b7b60067b Removing irrelevant comments 2008-09-19 00:22:16 +00:00
pdontthink
68e7ef6f2e RPC requests should use their own template sets with different content-type. 2008-09-10 06:48:00 +00:00
pdontthink
fa7436a9de Allow template sets to define what the content-type of their output is. 2008-09-10 03:04:14 +00:00
Thijs Kinkhorst
833746dca6 rework seed generation: this is something that really belongs in init.php
so do it there. Input enough random components from diferent dimensions,
so hard to predict.
2008-08-21 12:16:20 +00:00
pdontthink
46b21f8d48 Fix prefs_backend hook and remove config_override hook - plugin authors take note 2008-07-03 01:08:25 +00:00
Thijs Kinkhorst
8f8a7ea706 get_magic_quotes_* functions deprecated in PHP 5.3.x. Check for
existance and ignore deprecation warnings.
2008-03-03 14:03:22 +00:00
pdontthink
642f901396 A few output elements are used often, so just retrieve them once and make them globally available 2008-01-06 06:01:10 +00:00
pdontthink
a5ae8eddb5 Comment and linguistic fixes 2008-01-04 04:12:12 +00:00
pdontthink
55de62d7d3 Adding debug mode to core. Please run the configuration utility once after retrieving this update. Note that this update includes a change that makes it possible to use SquirrelMail constants in the configuration file(s). 2007-11-27 09:12:05 +00:00
pdontthink
23efc6b619 Fixed mailto: again. Should work with all the cc, bcc, subject parameters as well. Sample Windows registry entry for HKEY_CLASSES_ROOT\mailto\shell\open\command is "C:\Program Files\Mozilla Firefox\firefox.exe" "http://example.org/webmail/src/mailto.php?emailaddress=%1" or "C:\Program Files\Internet Explorer\IEXPLORE.EXE" "http://example.org/webmail/src/mailto.php?emailaddress=%1" 2007-11-27 01:50:43 +00:00
pdontthink
990a2741a3 Allow custom session handlers to work correctly (and be defined at the application level with SquirrelMail) -- TODO: Cannot forget to add info about this to the docs! 2007-11-02 18:51:38 +00:00
pdontthink
68a5991e02 Add note that config_override should probably be removed pending previous noted fix 2007-11-01 19:53:00 +00:00
pdontthink
e932e013ab Add note about erroneous hook placement - PLEASE read the comment and reply if you have any input 2007-11-01 19:34:39 +00:00
pdontthink
b0dbc77d53 Minor wording and spacing fixes 2007-08-31 23:21:17 +00:00