Commit graph

983 commits

Author SHA1 Message Date
pdontthink
302724aa45 Add new spacer image and allow its use for unsafe images instead of the sec_remove_* image -- brings HTML emails into the modern age (much more viewable) 2013-10-23 10:09:16 +00:00
Fredrik Jervfors
c076a1f1ae Update copyright 2013-07-26 17:31:02 +00:00
pdontthink
47cddde346 Allow more liberal reuse of tokens to avoid cross-frame conflicts 2013-06-18 04:20:50 +00:00
Fredrik Jervfors
703f538bea Resetting $Id$
Subversion expands the $Id$ keyword anchor to a string, but some files
in this repository have strings instead of keyword anchors.
2013-03-29 11:35:02 +00:00
Thijs Kinkhorst
efd75f4867 Replace calls to htmlspecialchars() with sm_encode_html_special_chars().
New function sm_encode_html_special_chars() encodes HTML special
characters by calling htmlspecialchars(). It sets the character set
to ISO-8859-1, to fix compatibility with PHP >= 5.4.

Patch by Paul Lesniewski.

See #3491925
2012-12-09 12:06:30 +00:00
pdontthink
dbb665c8c8 Use sqsession_* instead of session_* 2012-09-18 17:43:15 +00:00
pdontthink
56dd93f889 Prevent endless recursive sent subfolder names - see: http://thread.gmane.org/gmane.mail.squirrelmail.user/39178 2012-08-29 17:03:09 +00:00
Thijs Kinkhorst
daaf4c2974 hex2bin is introduced in PHP 5.4 2012-02-08 12:11:18 +00:00
pdontthink
acc409fb2a Updating copyrights. Happy New Year. 2012-01-02 02:09:17 +00:00
pdontthink
e61d33ae49 Fix XSS holes in generic options inputs, XSS hole in the SquirrelSpell plugin, and added anti-CSRF protection to the empty trash feature (thanks to Nicholas Carlini for finding all these issues) [CVE-2010-4555] 2011-07-12 04:45:49 +00:00
pdontthink
fc57bf2b59 Happy New Year! 2011-01-06 03:16:21 +00:00
pdontthink
0db4e925c0 Unify output strings (Thanks to Juergen Edner) (#3139973). 2010-12-21 14:04:08 +00:00
pdontthink
8e90c103d4 Fixed minor vulnerability in Mail Fetch plugin [CVE-2010-1637/TEHTRI-SA-2010-009] 2010-06-21 07:18:55 +00:00
jangliss
3dc0e61960 - Fix error with SpamCop reporting plugin not being able to send report as
emails (#1795310).
  - Fix typo in SpamCop plugin.
  - Tidy some output (slightly personal to stop Eclipse complaining about errors in the code)
2010-06-20 16:58:46 +00:00
pdontthink
68c28cf766 displayInternalLink() was removed 2.5 years ago (revision 12549), but this plugin was not updated. Thanks to Christian Kujau for noticing. 2010-01-28 16:59:27 +00:00
pdontthink
7aa0e60863 Update copyrights to 2010 2010-01-25 03:23:30 +00:00
jangliss
fe144bc255 Fix for security token missing in newmail plugin (#2919418). 2009-12-22 17:15:34 +00:00
pdontthink
0154fca83f Add security tokens to change password plugin 2009-12-18 06:46:16 +00:00
pdontthink
7ee843cbad Fixed broken SpamCop email submission: needed updated send button name and security token 2009-10-04 23:01:35 +00:00
pdontthink
aeba0f0085 If we add a token to lang_setup (#13855), need to check it in lang_change 2009-10-04 21:00:28 +00:00
jangliss
7c56855cc1 Additional smtoken changes. 2009-10-04 15:42:49 +00:00
Fredrik Jervfors
134d462c94 The copyright symbol isn't really needed since the word "copyright" is there. Also it doesn't display right in the documentation. 2009-09-29 12:15:33 +00:00
pdontthink
bc3fb36016 Stop using deprecated ereg() functions (#2820952) 2009-07-29 01:55:21 +00:00
Fredrik Jervfors
320b1b7786 Porting comments and strings between 1.4 and 1.5. 2009-05-29 10:55:17 +00:00
Fredrik Jervfors
14e6983ac1 No double spaces in strings please. They will not show up in HTML anyway. 2009-05-28 22:46:56 +00:00
Fredrik Jervfors
d0900618b8 Porting comments betweeen 1.4 and 1.5. 2009-05-26 13:11:31 +00:00
Fredrik Jervfors
0be42f8b9b Removing the shut down DSBL blocklists. Thanks to Martin Jalakas for the report (#2796734). 2009-05-26 11:52:09 +00:00
jangliss
278e0f1e3a Fix for bug_report plugin not handling multiple values for same key (AUTH= AUTH=) 2009-05-24 06:08:56 +00:00
pdontthink
64d68af4df - Fixed the Filters plugin to allow commas in filter criteria text 2009-05-19 01:51:16 +00:00
Fredrik Jervfors
be847014a1 Fixing spelling error (I hope). 2009-05-01 14:39:28 +00:00
Fredrik Jervfors
5203ff194f Changing back to messages. 2009-04-17 10:28:27 +00:00
Fredrik Jervfors
cac2dbc248 A mail is what's stored at the IMAP/POP3 server. A message is information from an application. 2009-04-16 10:28:10 +00:00
Fredrik Jervfors
6816d92733 String fix. 2009-04-16 09:06:28 +00:00
Fredrik Jervfors
ed3886e1ea A mail is what's stored at the IMAP/POP3 server. A message is information from an application. 2009-04-16 09:03:50 +00:00
Fredrik Jervfors
0a6245814a There are too many modified files being committed without the copyright year being updated, so here's a copyright year update the old-fashioned style. 2009-04-15 22:00:49 +00:00
Fredrik Jervfors
71af3e8508 Removing the PHP close tag at the last line. 2009-04-15 16:34:33 +00:00
Thijs Kinkhorst
7dca12ffb1 fix listcommands template for Send form changes 2009-04-15 16:30:42 +00:00
Fredrik Jervfors
0291a597ff Changing newlines from DOS to Unix style.
Updating documentation block for phpDocumentor.
2009-04-15 16:26:43 +00:00
pdontthink
3c712948b0 Make default $sent_subfolders_base whatever $sent_folder is
Update folder settings and auto-create needed subfolder as soon as settings are changed
Update $sent_folder in user prefs when $sent_subfolders_base is not "Sent" folder
2009-04-06 19:06:45 +00:00
pdontthink
ec4900e959 Fix PHP notices 2009-04-06 07:09:54 +00:00
pdontthink
40c652f670 Code updates 2009-04-06 07:03:56 +00:00
pdontthink
17f2bf3cfc Update to work with 1.5.2 - this was old 1.4.x code 2009-04-05 06:35:15 +00:00
pdontthink
7e80fed687 Typo 2009-04-05 05:37:46 +00:00
pdontthink
10c38e1d93 Forgot to add file before last commit... 2009-04-05 05:32:13 +00:00
pdontthink
6df99377fd Move code out of setup.php 2009-04-05 05:29:51 +00:00
pdontthink
cb8c1c05f4 Add compatibility with Dovecot's bigint UIDs 2009-02-01 02:24:32 +00:00
pdontthink
5e84fc7678 Consistency 2009-01-16 00:25:51 +00:00
pdontthink
b31794d1a1 Don't use 'None' in displayPageHeader() calls 2008-12-22 03:28:44 +00:00
pdontthink
f5bf1d9f61 Don't use 'None' in displayPageHeader() calls 2008-12-22 03:23:10 +00:00
pdontthink
bfa610b4b3 Don't load plugin pages if plugin is not enabled. Thanks to Niels Teusink for finding this. 2008-12-05 09:46:53 +00:00