Commit graph

3121 commits

Author SHA1 Message Date
pdontthink
326a1c7f10 Encode outgoing attachments that have lines longer than allowed per RFC. Otherwise, they can be corrupted when artificially (forced) folding - unfolding typically produces an extra space at the fold in most MUAs. This fixes #2226470 and #1473714. Thanks to Kelly Fallon. 2009-04-03 08:31:17 +00:00
pdontthink
6db973fc82 Fix documentation 2009-04-01 21:18:59 +00:00
pdontthink
e6fa5d31d8 Documentation fix 2009-04-01 21:10:06 +00:00
pdontthink
45517fd6f0 Put quotes around both encoded and non-encoded addresses for consistency (#2449213) 2009-04-01 11:06:10 +00:00
pdontthink
77b3c3d037 Put sample .htaccess in all directories browser does not access directly 2009-03-26 22:34:32 +00:00
pdontthink
d27f53fb49 Fix for accesskey getting set to 'NONE' in somem cases 2009-03-26 21:05:53 +00:00
pdontthink
cebf083b4e Add access keys to mailbox list 2009-03-26 20:34:35 +00:00
pdontthink
39355dd534 Add access keys for menubar 2009-03-26 08:40:48 +00:00
pdontthink
836d2c03e6 Allow makeInternalLink() and makeComposeLink() to accomodate access keys 2009-03-25 03:16:51 +00:00
pdontthink
020367505f Allow multiple addresses in one abook entry (separate with commas), although we HIGHLY DISCOURAGE grouping in this manner - note amongst other issues that can come up, sizing for large groups will be a problem 2009-02-19 23:34:11 +00:00
pdontthink
118125ad8e More of the same 2009-02-19 22:32:50 +00:00
pdontthink
aa91dedc20 Allow version numbers to omit trailing zeros 2009-02-19 22:24:48 +00:00
pdontthink
f86dae353b Ensure that hash directory computation is the same on both 32 and 64 bit architectures (#2596879) (Thanks to Mike Sweetser) 2009-02-14 07:32:38 +00:00
pdontthink
cb8c1c05f4 Add compatibility with Dovecot's bigint UIDs 2009-02-01 02:24:32 +00:00
pdontthink
3bdb47ac83 Add typecast type for bigint 2009-01-23 20:42:43 +00:00
pdontthink
b9c6b56944 Set more restrictive permissions on abook files - matches how pref files are treated. Thanks to 'Lampa' for the pointer. 2009-01-14 21:55:29 +00:00
jangliss
6eac2ea935 Removing unneeded call to the squisher, as the IDs are passed straight onto the sub functions. 2009-01-04 00:05:29 +00:00
pdontthink
176f41716d Correct since tag 2008-12-23 03:04:17 +00:00
pdontthink
b69961cfe0 Make all submit button names unique on compose screen 2008-12-23 02:59:14 +00:00
pdontthink
28be6e0075 Fix body onload per FIXME 2008-12-21 09:43:22 +00:00
pdontthink
33cfdfb28b Oops 2008-12-19 08:37:39 +00:00
pdontthink
6de4d8ae69 Add password option widget 2008-12-19 08:33:56 +00:00
pdontthink
7e1056287d Add info option widget type 2008-12-19 00:12:54 +00:00
pdontthink
0a83e3fbf1 Place quotes around the real name portion of addresses when putting them on the compose form 2008-12-08 20:19:18 +00:00
Thijs Kinkhorst
b3d411ce07 also need to strip \r if we split on \n, otherwise the <pre> environment
will interpret each \r as an extra newline between lines.
2008-12-05 11:01:29 +00:00
pdontthink
03b26f2c81 Sync with 1.4.x wherein REQUEST_URI isn't always trustable under some PHP versions for use as our PHP_SELF variable value 2008-12-05 08:41:09 +00:00
pdontthink
7b7ec67401 Fix port detection (2388423) 2008-12-04 21:34:53 +00:00
pdontthink
7f8dd6cd77 Put info about the user/group of the web server in the configtest. Grabbing that info is implemented as a core function so plugins (such as ones that need to check SUID script permissions) can also make use of it. 2008-12-04 09:35:41 +00:00
pdontthink
5586070b94 Allow choice of line endings when downloading or decoding strings (bodies) 2008-12-04 07:13:09 +00:00
pdontthink
f56f39ada5 Fix improperly quoted href link addresses; closes XSS exploit exlained at CVE-2008-2379. Thanks to Secunia Research for reporting this issue. 2008-12-04 04:20:40 +00:00
pdontthink
7d285b51a0 Fix HTTPS detection under Windows IIS (#2318118) 2008-11-26 02:56:42 +00:00
pdontthink
57b9aba210 Thanks, Thijs: svn propset svn:keywords Id <file> 2008-11-21 19:32:02 +00:00
pdontthink
8e10f61512 Use sq_is_writable() 2008-11-21 02:51:13 +00:00
pdontthink
8776ac77d7 How about adding a space 2008-11-20 22:34:38 +00:00
pdontthink
ede29b2901 Er, is it "Id:"? 2008-11-20 22:33:34 +00:00
pdontthink
bf4627edd2 Add a functions file for file utility functions (say that 10 times fast) along with some new file functions 2008-11-20 21:46:12 +00:00
pdontthink
d7f614d31b Forgot @since info for sqsetcookie 2008-11-20 20:08:16 +00:00
pdontthink
4a76899c55 Minor spacing fix 2008-10-30 21:30:09 +00:00
pdontthink
60ff13d11e Allow control over white space wrapping of auto-generated SquirrelMail option widgets 2008-10-07 04:48:28 +00:00
pdontthink
36a6401ac7 Remove obsolete comments 2008-09-26 19:09:30 +00:00
pdontthink
cb1d5f52ff Make more readable; expose header replace parameter when setting cookies 2008-09-26 19:08:20 +00:00
pdontthink
cfcffdbead Use sqsetcookie(), not setcookie() 2008-09-24 19:58:23 +00:00
pdontthink
e4252c5bf3 Just fiddling. Give credit where credit is due. Template class header() function now supports the 'replace' argument. 2008-09-24 01:56:59 +00:00
pdontthink
d09583a7bf Relax restriction on image tag src URIs. Others PLEASE TEST (HTML mails with unsafe images). Per the developers mailing list, no one could show that there was any exploit here. Some code has been inserted here but commented out in case there is in fact some exploit - the code will filter image URI file extensions as before but for URIs that fail that test, SM will check the actual served content for legitimate image files (so dynamically generated images from .asp, .php, and other systems can be correctly displayed). 2008-09-11 01:32:56 +00:00
pdontthink
fa7436a9de Allow template sets to define what the content-type of their output is. 2008-09-10 03:04:14 +00:00
pdontthink
71d7e677ed Move options constants to constants include file 2008-08-26 06:40:25 +00:00
Thijs Kinkhorst
833746dca6 rework seed generation: this is something that really belongs in init.php
so do it there. Input enough random components from diferent dimensions,
so hard to predict.
2008-08-21 12:16:20 +00:00
Thijs Kinkhorst
1413ea0073 use our existing random seeder function 2008-08-21 11:33:11 +00:00
pdontthink
c0e02fd5d4 Fix subsequent PHP notices caused by last commit. Also note that incorrect server responses shouild be error-checked, but they are not, probably because that's indicative of more fundamental problems elsewhere. 2008-08-17 03:49:37 +00:00
pdontthink
5c2f2e7f89 Eliminate PHP notices. Thanks to Pablo Alvarez de Sotomayor Posadillo 2008-08-16 08:58:19 +00:00