Commit graph

3121 commits

Author SHA1 Message Date
tokul
5ce6f4813b 8bit symbol should not be part of URL. If URL parser detects 8bit, it
treats it as end of URL. (#1356798)
2006-03-06 17:00:39 +00:00
jangliss
19e3a7b32a - Security: Possible cookie theft in src/redirect.php if
register_globals is enabled, and malicous site is running
    in same domain.
2006-03-03 03:39:18 +00:00
tokul
f79fb927ee if PHP recode functions are used for decoding, they might use html character
entities. Encoding functions can't handle them. It is easier to convert all
entities in one place instead of finding supported entities in every encoding
function.
2006-03-02 20:31:31 +00:00
tokul
6651dae276 don't include delimiter in subscription command, when noselect mailbox is created 2006-03-01 21:15:00 +00:00
jangliss
b25a3ff9bf Make the use_*_tls options half respect old values. If you leave it as
true, then it would try to use STARTTLS.  While I understand this is a
new feature, and this is the dev branch, a little backwards compatibility
is easy in this case.  The value 2 is considered true... Using === instead
is an exact match, so you'd have to have 2 in the use_*_tls options for it
to trigger starttls mode.
2006-02-26 06:32:17 +00:00
Fredrik Jervfors
6d04a1e45d Assuming that this was used for debugging, thus removing it. 2006-02-25 13:13:22 +00:00
stevetruckstuff
575dca0a42 Incoproated template config file. Templates can now include their own javascript files. If a template pack does not incorporate a specific template, the default template will be used instead. 2006-02-24 22:31:40 +00:00
Thijs Kinkhorst
35b012bbac need to keep it 'url', not 'idiocy', because 'url' also matches the regexp 2006-02-23 14:13:47 +00:00
Thijs Kinkhorst
6d6ac0cbec also need to get u\rl outside of style blocks;
do not try to correct them since they are obviously malicious
2006-02-23 13:50:08 +00:00
Thijs Kinkhorst
b96d6f9e66 also parse uppercase U\RL 2006-02-23 13:10:58 +00:00
Thijs Kinkhorst
5cd6d8d00f - Fix MagicHTML fix with respect to parsing of u\rl in IE. 2006-02-23 13:03:20 +00:00
stevetruckstuff
f5136f0282 Removed documentation for unused parameter $icon_theme_path. Its actually a global inside the function. 2006-02-21 17:49:31 +00:00
stevetruckstuff
4eb3db467b Changes for new icon theming 2006-02-21 00:04:56 +00:00
tokul
b663737cf0 adding information about version that introduced constants
adding SM_PATH define in order to avoid PHP errors on direct file access.
2006-02-20 18:11:01 +00:00
tokul
24045cf04c centering logout_error table 2006-02-18 16:11:46 +00:00
tokul
91a329b313 restoring globalization of text alignment vars.
moving text alignment setup from $languages to GET request.
2006-02-13 17:23:51 +00:00
stekkel
d13fa62a8b small thread code correction 2006-02-12 18:24:50 +00:00
tokul
7346f9a580 Upping HEAD version number. 1.5.1 scripts are stored in SM-1_5_1 branch. 2006-02-12 16:11:50 +00:00
stekkel
4dfdb073de array_shift is slowwwww, this approach is faster. 2006-02-12 15:48:11 +00:00
stekkel
c22bde8859 The old thread code caused time outs with a message set of 15000 messages so
I started debugging, found out that preg_split was extremely slow and
started to avoid that call. I ended up in removing a lot of overhead and
working thread code.

Next step is adapting the indent array and add more status info per node in
order to generate nicer trees.
2006-02-12 14:41:26 +00:00
stekkel
fa2f6d41b0 removing global 2006-02-11 15:20:06 +00:00
stekkel
f28f5bb0eb Fix for #1093360.
The fix also includes the move from manual generated error messages in
imap_general to the central error handler.
In order to catch non fatal error message in compose.php I had to collect
the error messages array before the header redirect and write them to the
session. In read_body.php, compose.php and right_main.php I add the error
messages to the error handler again and clean up the delayed error messages
array.
I also modified the error handler in order to display the page_header in
case it wasn't displayed yet.
2006-02-11 15:14:31 +00:00
stekkel
2f7198e23c Fix for from names displayed in the attachment area when the message is a
digest. After opening a digest message the rfc822_header object structure
which resulted we couldn't few the from name anymore when switched back to
the digest message.
We need to fix this later. See the comments.
2006-02-11 11:13:05 +00:00
stekkel
75f2ab158a Patches from Michael Long
* implementing imap status cache in order to reduce
the amount of status calls generated from the newmail and filter plugin.
* enable the cumulative message account in left_main.php again

Patches reviewed by me. I fixed a few small things in newmail and I added RECENT status
calls in imap_mailbox.php in order to make the "only check recent mail"
option work.
2006-02-10 22:16:07 +00:00
stekkel
d4d8b82a6b UW response will now be detected too
[BADCHARSET (US-ASCII ,,,, )]
2006-02-10 19:02:28 +00:00
stekkel
9e94038db4 detecting character in a NO response propably means:
Unrecognized character set or
character set is not supported

In other words, it's very certain the NO is caused by an unsupported
charset.
2006-02-10 19:00:11 +00:00
indiri69
6ee4c9ec2f Fix unknown variable message when the user has never logged in before (tested with dovecot). 2006-02-08 20:04:34 +00:00
stekkel
4801835e4c Headers fetch from read_body triggered by using the prev/next links didn't
add sufficient info  for displaying the correct header in the messages list.
The extra check detects if the header is complete and add the specific uid
to the array with headers to be fetched.
2006-02-08 17:56:25 +00:00
stekkel
cc915a806f Better error reporting 2006-02-08 08:00:10 +00:00
Fredrik Jervfors
11d4f6eb4b Moving the links "Download this as a file" and "View Unsafe Images" to the "Options" field, where they belong. This has also been requested at the mailing lists. 2006-02-07 02:54:08 +00:00
tokul
7238caedc3 adding sm-1.4 version 2006-02-06 07:19:15 +00:00
Fredrik Jervfors
4ef558abc9 Replacing HTML "script" element deprecated attribute "language". 2006-02-05 11:32:35 +00:00
tokul
a5b0361c80 replacing obsolate function calls with current ones 2006-02-05 11:29:41 +00:00
Fredrik Jervfors
863a5987c4 Replacing deprecated HTML "center" element. 2006-02-05 11:18:50 +00:00
tokul
bb2302ba12 disable regexp compilation error 2006-02-05 09:13:27 +00:00
tokul
cc26e111e2 doctype switched from quirks to standards compliance mode
added template arguments to style.php stylesheet
added loading of default style values when user values are not set are set.
fixed theme_css test
2006-02-05 08:31:04 +00:00
Fredrik Jervfors
91cda79db6 Removing trailing spaces from strings. 2006-02-01 09:25:11 +00:00
Fredrik Jervfors
807b9f4752 Work around the fact that /src/style.php depends on a logged in user, thus breaking the login page. 2006-01-31 15:03:06 +00:00
tokul
450003d75f ipv6 address must be in [] 2006-01-29 11:18:22 +00:00
stekkel
cab8c6de26 Request a sqimap_run_command_list instead of a sqimap_run_command because in
case of unsollicited responses sqimap_run_command only returns the first
response and if that's the unsollicited one instead of the SORT or SEARCH
response we loose the requested response
2006-01-29 10:36:06 +00:00
tokul
57ae2c61ce Added IMAP and SMTP STARTTLS extension support.
Saved SMTP EHLO response in class parameters.
Moved sanitizing of SMTP errors from delivery class to display scripts.
Allowed to use configtest.php when client_ip matches server_ip.
There is no 1.3.3 version. TLS was introduced in 1.4.0.
2006-01-28 19:24:08 +00:00
Thijs Kinkhorst
184c69663d config.php was not loaded before plugin.php, but that's needed to make
plugins work. The real solution is a centralized init and no active code
under functions/
2006-01-28 19:12:19 +00:00
stekkel
0084fb6502 Merge of template patch from Steve Brown
Adapted static dirs to configurable template dir (template set support)
2006-01-28 16:06:12 +00:00
tokul
83fdb4c332 copyright update 2006-01-23 18:46:41 +00:00
tokul
2171dddcd0 moving main color tags to css 2006-01-23 17:29:10 +00:00
tokul
c5c93fb8cc don't issue imap commands when target mailbox is same as source mailbox.
reduces number of imap calls and fixes mailbox caching issues (message is
not visible on message list until cache is updated).
might fix imap server locking on MacOS cyrus (#1409453).
2006-01-22 12:08:33 +00:00
stekkel
4f34bbc304 Prohibit imap injection attempts 2006-01-19 18:05:27 +00:00
Thijs Kinkhorst
19072e5fad netscape date specification is subtly different from rfc822 2006-01-16 21:51:03 +00:00
Thijs Kinkhorst
949b0be7b3 cookie needs gmdate (not date), and do not specialcase '0'. 2006-01-16 20:53:26 +00:00
jangliss
ab752cb29a Missed a ) 2006-01-16 15:00:33 +00:00