Commit graph

357 commits

Author SHA1 Message Date
pdontthink
6092b83f73 Remove personal data from Message ID seed. (#880029/847107) 2009-07-31 05:23:04 +00:00
pdontthink
bc3fb36016 Stop using deprecated ereg() functions (#2820952) 2009-07-29 01:55:21 +00:00
pdontthink
9eb98bb9a1 Remove possible bad system admin typos (#2827153). 2009-07-28 23:24:11 +00:00
jangliss
df73f17aef Fixed broken RFC1918 reference in contrib/.htaccess and doc/.htaccess (#2798839).
This probably needs further discussion
2009-06-02 02:10:56 +00:00
Fredrik Jervfors
0be42f8b9b Removing the shut down DSBL blocklists. Thanks to Martin Jalakas for the report (#2796734). 2009-05-26 11:52:09 +00:00
jangliss
278e0f1e3a Fix for bug_report plugin not handling multiple values for same key (AUTH= AUTH=) 2009-05-24 06:08:56 +00:00
Thijs Kinkhorst
6f1f3d6b35 The shell escaping fix in map_yp_alias (CVE-2009-1579) was incomplete.
Thanks Michal Hlavinka for noticing this. [CVE-2009-1381]
2009-05-21 17:11:22 +00:00
Thijs Kinkhorst
a869fd2529 update changelog 2009-05-21 10:23:43 +00:00
pdontthink
64d68af4df - Fixed the Filters plugin to allow commas in filter criteria text 2009-05-19 01:51:16 +00:00
jangliss
e14c336ac3 - Cleanup variable name in address search for compose to clearup confusion.
- Remove Javascript from address search page when JavaScript is disabled.
  - Add "Check All" function to address book when using "in-page" addressbook.
2009-05-17 00:38:30 +00:00
pdontthink
98b8e57444 Forgot to mention PHP 5.3/6 compatibility update the other day 2009-05-12 07:42:28 +00:00
pdontthink
10804e03a1 Always generate $base_uri for every page request as opposed to doing it only on some pages. Always regenerate session ID at login to prevent session fixation by an attacker who has set a malicious cookie on the client browser. Try to clean up extraneous cookies, such as ones some browsers might actually obey from the src/ directory. Thanks to Tomas Hoger. (CVE-2009-1580) 2009-05-11 22:50:16 +00:00
pdontthink
eda7b9b157 OMG - unsanitized shell command. Thanks to Niels Teusink. (CVE-2009-1579) 2009-05-11 22:17:46 +00:00
pdontthink
da050015d2 Sanitize decrypt_headers.php form input (base64 decoding is not the same as sanitizing), general cleanup and grammatical fixes. Thanks to Niels Teusink. (also CVE-2009-1578) 2009-05-11 22:04:40 +00:00
pdontthink
7e85ed842b Fixed improper sanitizing of PHP_SELF and the lack of sanitizing of QUERY_STRING server environment variables. Thanks to Niels Teusink and Christian Balzer. (CVE-2009-1578) 2009-05-11 21:49:23 +00:00
pdontthink
d0fd71bf6e Remove ability for HTML emails to use CSS positioning to overlay SquirrelMail content. Thanks to Luc Beurton. (#2723196/CVE-2009-1581) 2009-05-11 21:19:52 +00:00
pdontthink
3d29cfb9fd Adding Khmer translation. Thanks to Khoem Sokhem. 2009-05-07 21:55:41 +00:00
Fredrik Jervfors
be847014a1 Fixing spelling error (I hope). 2009-05-01 14:39:28 +00:00
pdontthink
cc2413ae90 Use squirrelmail.org 2009-04-23 02:21:42 +00:00
pdontthink
172e46eb4a This has all been previously migrated to the documentation repo 2009-04-21 21:07:01 +00:00
pdontthink
4e08ebbbc0 Add display indicator for forwarded messages 2009-04-17 10:49:38 +00:00
pdontthink
fe3be0637d Massive update. Fixed several reported issues and some I discovered along the way. Also added quite a few new features including hashed directory support and fully dynamic database, table and field names. This closes #1940328 and #2007554 amongst other things (like multiple --user arguments failing). 2009-04-04 02:29:19 +00:00
pdontthink
5649dd2701 Update 2009-04-03 08:32:30 +00:00
pdontthink
266023c1b8 Updates 2009-04-02 00:40:45 +00:00
pdontthink
83854bb3e4 Add RFC 2231 support. Thanks to Piotr Pawlow. (#2501379) 2009-04-01 08:24:48 +00:00
pdontthink
3571c349cd 2009-03-29 00:12:24 +00:00
pdontthink
7bc0255420 Add PHP index file 2009-03-29 00:11:34 +00:00
pdontthink
b185cebf22 Reorg and add to the version-specific section 2009-03-27 04:28:36 +00:00
pdontthink
c92a637d9f Minor fix 2009-03-27 04:15:13 +00:00
pdontthink
88b4cf648e Small change 2009-03-27 04:09:11 +00:00
pdontthink
9a77ae3aac Upgrade manual was aging and needed to be synchronized to that in the stable tree as well as the administrator manual. Remember to update all three of those documents when touching this in the future. 2009-03-27 03:56:29 +00:00
pdontthink
080c224a0e Update 2009-03-26 23:41:37 +00:00
pdontthink
66c769fc92 Moved documentation to doc/ directory and added example .htaccess files in all directories that browsers don't need direct access to 2009-03-26 22:35:06 +00:00
pdontthink
29cd4706d5 Call me anal 2009-03-26 22:17:27 +00:00
pdontthink
7ee164d580 Add sample .htaccess file to protect doc/ directory 2009-03-26 22:08:54 +00:00
pdontthink
7d633ade9c Shuffling release notes 2009-03-26 21:55:20 +00:00
pdontthink
4df4c97a8f Shuffling release notes 2009-03-26 21:48:03 +00:00
pdontthink
a6976d0b7b Move docs to doc/ directory 2009-03-26 21:38:33 +00:00
pdontthink
cfc29e1b89 Quick attempt at correcting the English in the plural forms section 2008-07-04 21:29:18 +00:00
pdontthink
e7a16886f5 Fix language 2008-06-18 07:26:00 +00:00
Fredrik Jervfors
5b90a2507a Removing obsolete link to developer documentation. 2007-03-04 02:42:05 +00:00
Fredrik Jervfors
755e57cbb3 Moving "doc/themes.txt" to the administrator's manual. 2007-03-04 02:26:29 +00:00
Fredrik Jervfors
418bcd0528 Moving "doc/db-backend.txt" to the administrator's manual (again). 2007-03-04 02:05:53 +00:00
Fredrik Jervfors
1d4da1b2ea Moving "doc/db-backend.txt" to the administrator's manual. 2007-03-04 01:56:54 +00:00
Thijs Kinkhorst
f585138b19 replace CVS with SVN 2007-01-13 19:08:18 +00:00
Fredrik Jervfors
14c04623d1 Moving the development documentation to the documentation module. 2006-08-05 18:44:30 +00:00
tokul
b33c4a098b moved smtp sitewide configuration to main configuration utility
added quote_single subroutine, that is used to sanitize single quoted php strings
removed obsolete command18() subroutine
2006-08-05 07:38:01 +00:00
tokul
e27ec8a55d 1.4.7 cleans globals too 2006-07-22 17:56:52 +00:00
Thijs Kinkhorst
a57ab2095d remove references to submitting themes to us. we've got a LOT of themes
already included
2006-07-16 18:10:56 +00:00
Thijs Kinkhorst
0f2c3189d4 db scheme for postgres is different from that for mysql, document that
(instead of changing it - that could break stuff for no strong reason)
2006-07-04 08:57:27 +00:00