Thijs Kinkhorst
6f1f3d6b35
The shell escaping fix in map_yp_alias (CVE-2009-1579) was incomplete.
...
Thanks Michal Hlavinka for noticing this. [CVE-2009-1381]
2009-05-21 17:11:22 +00:00
pdontthink
eda7b9b157
OMG - unsanitized shell command. Thanks to Niels Teusink. (CVE-2009-1579)
2009-05-11 22:17:46 +00:00
pdontthink
dba77072d2
Dunno why this was never implemented, but the comments say it's OK, so here goes...
2009-05-11 22:08:25 +00:00
Fredrik Jervfors
0a6245814a
There are too many modified files being committed without the copyright year being updated, so here's a copyright year update the old-fashioned style.
2009-04-15 22:00:49 +00:00
pdontthink
6c2c0ff29b
FIXME
2008-07-10 08:43:49 +00:00
pdontthink
167a679501
FIXME
2008-07-10 08:43:04 +00:00
pdontthink
416c38cee1
Notes about HTML we need to remove
2008-01-05 06:06:21 +00:00
Thijs Kinkhorst
593944ce7f
- Fix busy loop and notice when two literals in IMAP fetch ( #1739433 ).
...
thanks James E. Blair
2007-06-25 21:05:56 +00:00
Thijs Kinkhorst
11b10ba5d1
increment year in copyright notices
2007-01-13 20:15:44 +00:00
stekkel
9767e2393c
Remove sqsetcookieflush call (not needed)
2007-01-13 14:04:39 +00:00
pdontthink
717be5c30c
Massive update to plugin system architecture. Please test! Not all core plugins are tested yet, please point out issues that need to be fixed. Please see http://marc.theaimsgroup.com/?t=116282394000001&r=1&w=2
2006-12-10 05:07:54 +00:00
pdontthink
3b05f3adc4
Allow sqimap_login() to return error string when connection fails; would be nice if we had an error code system instead; the extent to which HTML is buried in error messages in the core like here is indicative of just how far away SM's architecture is from a good modularized system that is truly ready for t12n and a good API.
2006-11-11 20:05:23 +00:00
pdontthink
93fb75d405
Doc fix
2006-11-11 08:24:25 +00:00
pdontthink
6692d38bd8
Long time in coming: allow sqimap_login() to return even if connection failed. Useful in many places, including the new API library.
2006-11-11 08:13:12 +00:00
Alexandros Vellis
0f2d1a970e
Fix for namespace parsing. UWash has a namespace prefix without a delimiter, which is perfectly legal.
2006-11-02 12:54:14 +00:00
Alexandros Vellis
49c78a9b56
NAMESPACE support in IMAP backend. Also a whitespace fix.
2006-10-10 12:48:44 +00:00
Alexandros Vellis
2b54ac2f41
Support for authz authorization identity in the IMAP backend.
2006-10-09 11:38:32 +00:00
stekkel
01181a5333
Fix for bug #1562271
...
* OK [PARSE] Unexpected characters at end of address: {SET:debug=51}
Triggered literal fetching from the imap stream whil {SET:debug=51} is not
an integer and not meant as literal.
2006-10-04 19:25:25 +00:00
pdontthink
60a03d0894
Wrong variable name used
2006-09-04 18:06:28 +00:00
tokul
59ae6f3ac2
removing trailing ?> from function scripts
2006-07-15 12:01:32 +00:00
Alexandros Vellis
95296e46ea
Fix capability retrieval for "double" cases in server capability response, for instance in a new Cyrus: SORT SORT=MODSEQ . This patch will eliminate a notice that was displayed.
2006-05-26 12:53:18 +00:00
tokul
4115a9110e
updating error_box() function calls. second argument was modified.
...
using squirrelmail template code for closing html tags.
added some comments in footer.tpl in order to detect generated footer
2006-05-14 17:09:29 +00:00
tokul
ca0bf2e239
if $key is set to false, sqimap_login() function will use sqauth_read_password()
...
to retrieve user password.
sqimap_login() calls in plugins are modified to use this code.
It allows to centralize place that is used to access password information.
Older way is preserved for backwards compatibility and different IMAP login
credentials.
2006-04-19 18:03:24 +00:00
stekkel
0a70f643f2
Centralized init
2006-04-05 00:22:11 +00:00
stekkel
1ca59fc121
Fix for updating the mailbox cache concernig flags
2006-03-17 17:48:31 +00:00
stekkel
ac5f37ba81
possible fix for unsolicited fetch responses during select call (IA Mail
...
Server v.5.3 Corporate Edition
2006-03-09 18:22:47 +00:00
jangliss
b25a3ff9bf
Make the use_*_tls options half respect old values. If you leave it as
...
true, then it would try to use STARTTLS. While I understand this is a
new feature, and this is the dev branch, a little backwards compatibility
is easy in this case. The value 2 is considered true... Using === instead
is an exact match, so you'd have to have 2 in the use_*_tls options for it
to trigger starttls mode.
2006-02-26 06:32:17 +00:00
stekkel
fa2f6d41b0
removing global
2006-02-11 15:20:06 +00:00
stekkel
f28f5bb0eb
Fix for #1093360 .
...
The fix also includes the move from manual generated error messages in
imap_general to the central error handler.
In order to catch non fatal error message in compose.php I had to collect
the error messages array before the header redirect and write them to the
session. In read_body.php, compose.php and right_main.php I add the error
messages to the error handler again and clean up the delayed error messages
array.
I also modified the error handler in order to display the page_header in
case it wasn't displayed yet.
2006-02-11 15:14:31 +00:00
stekkel
75f2ab158a
Patches from Michael Long
...
* implementing imap status cache in order to reduce
the amount of status calls generated from the newmail and filter plugin.
* enable the cumulative message account in left_main.php again
Patches reviewed by me. I fixed a few small things in newmail and I added RECENT status
calls in imap_mailbox.php in order to make the "only check recent mail"
option work.
2006-02-10 22:16:07 +00:00
stekkel
cc915a806f
Better error reporting
2006-02-08 08:00:10 +00:00
tokul
7238caedc3
adding sm-1.4 version
2006-02-06 07:19:15 +00:00
Fredrik Jervfors
91cda79db6
Removing trailing spaces from strings.
2006-02-01 09:25:11 +00:00
tokul
450003d75f
ipv6 address must be in []
2006-01-29 11:18:22 +00:00
tokul
57ae2c61ce
Added IMAP and SMTP STARTTLS extension support.
...
Saved SMTP EHLO response in class parameters.
Moved sanitizing of SMTP errors from delivery class to display scripts.
Allowed to use configtest.php when client_ip matches server_ip.
There is no 1.3.3 version. TLS was introduced in 1.4.0.
2006-01-28 19:24:08 +00:00
tokul
83fdb4c332
copyright update
2006-01-23 18:46:41 +00:00
jangliss
ab752cb29a
Missed a )
2006-01-16 15:00:33 +00:00
jangliss
4946845618
Saved additional calls to NAMESPACE if it was already saved in the session
...
by redirect.php. Suggestion from Michael Long.
2006-01-15 18:54:35 +00:00
Alexandros Vellis
b2d7c651c9
Put multiple capability options in an array.
2005-11-29 11:32:24 +00:00
tokul
24a1fdca96
http://bugs.php.net/bug.php?id=31341
...
PHP fixed escaping of curly brackets in 5.1. You can't escape { anymore. (#1366982 )
2005-11-26 19:45:10 +00:00
Fredrik Jervfors
9ed98bb1ec
phpDocumentor updates
2005-09-18 10:25:54 +00:00
tokul
c866fc3486
moving include to the top.
2005-07-31 12:44:39 +00:00
stekkel
befb14baf7
XSS fixes
2005-06-15 22:45:44 +00:00
Thijs Kinkhorst
6a3f0ffce5
Tweak IMAP connection error display ( #1203154 ).
2005-05-20 10:34:40 +00:00
Fredrik Jervfors
f98c36762d
Fixing strings:
...
- Removing space before colon
- Removing trailing spaces
- Changing "said" to "wrote"
2005-04-16 17:45:40 +00:00
tokul
bff510ede3
documenting functions. adding @deprecated to obsolate functions and @since
...
tags to functions introduced after 1.0. Trying to document argument types
where possible
2005-04-08 13:39:05 +00:00
Fredrik Jervfors
191baad95e
String fix
2005-04-08 09:44:08 +00:00
Thijs Kinkhorst
890f0e9aca
fix 'referral' bug for UW-servers, sorry people
2005-04-08 08:47:05 +00:00
Thijs Kinkhorst
3e6df95c87
Partial support for IMAP LOgin Referrals: tell the user what's going on
...
and log him out (RFC 2221) (Patch #1006242 ).
2005-04-06 21:47:06 +00:00
tokul
8d00d0bad3
adding param and since tags to some functions
2005-04-05 14:16:31 +00:00
