Commit graph

266 commits

Author SHA1 Message Date
pdontthink
cedca778de Add advanced control over the SSL context used when connecting to the SMTP and IMAP servers over SSL/TLS (Thanks to Emmanuel Dreyfus) 2014-01-21 01:13:49 +00:00
pdontthink
581dc23061 Happy 2014 2014-01-01 20:33:20 +00:00
Fredrik Jervfors
c076a1f1ae Update copyright 2013-07-26 17:31:02 +00:00
Thijs Kinkhorst
efd75f4867 Replace calls to htmlspecialchars() with sm_encode_html_special_chars().
New function sm_encode_html_special_chars() encodes HTML special
characters by calling htmlspecialchars(). It sets the character set
to ISO-8859-1, to fix compatibility with PHP >= 5.4.

Patch by Paul Lesniewski.

See #3491925
2012-12-09 12:06:30 +00:00
pdontthink
d4e2698415 Account for servers that send extra unsolicited FETCH responses (such as when flags change due to a FETCH request). PLEASE TEST! 2012-07-27 23:03:15 +00:00
pdontthink
33ebad3f5c Fall back to using LIST if NAMESPACE answer is malformed or otherwise problematic. This still doesn't account for situations where the NAMESPACE or LIST answer can't be parsed correctly. 2012-04-01 19:50:49 +00:00
Thijs Kinkhorst
c323e82aca I believe this code worked by chance, redefining it from string to array and
using it outside the code block it was defined in. This should repair it to
what was intended.
2012-03-24 10:42:31 +00:00
pdontthink
acc409fb2a Updating copyrights. Happy New Year. 2012-01-02 02:09:17 +00:00
pdontthink
fc57bf2b59 Happy New Year! 2011-01-06 03:16:21 +00:00
pdontthink
7aa0e60863 Update copyrights to 2010 2010-01-25 03:23:30 +00:00
Fredrik Jervfors
134d462c94 The copyright symbol isn't really needed since the word "copyright" is there. Also it doesn't display right in the documentation. 2009-09-29 12:15:33 +00:00
pdontthink
bc3fb36016 Stop using deprecated ereg() functions (#2820952) 2009-07-29 01:55:21 +00:00
Thijs Kinkhorst
6f1f3d6b35 The shell escaping fix in map_yp_alias (CVE-2009-1579) was incomplete.
Thanks Michal Hlavinka for noticing this. [CVE-2009-1381]
2009-05-21 17:11:22 +00:00
pdontthink
eda7b9b157 OMG - unsanitized shell command. Thanks to Niels Teusink. (CVE-2009-1579) 2009-05-11 22:17:46 +00:00
pdontthink
dba77072d2 Dunno why this was never implemented, but the comments say it's OK, so here goes... 2009-05-11 22:08:25 +00:00
Fredrik Jervfors
0a6245814a There are too many modified files being committed without the copyright year being updated, so here's a copyright year update the old-fashioned style. 2009-04-15 22:00:49 +00:00
pdontthink
6c2c0ff29b FIXME 2008-07-10 08:43:49 +00:00
pdontthink
167a679501 FIXME 2008-07-10 08:43:04 +00:00
pdontthink
416c38cee1 Notes about HTML we need to remove 2008-01-05 06:06:21 +00:00
Thijs Kinkhorst
593944ce7f - Fix busy loop and notice when two literals in IMAP fetch (#1739433).
thanks James E. Blair
2007-06-25 21:05:56 +00:00
Thijs Kinkhorst
11b10ba5d1 increment year in copyright notices 2007-01-13 20:15:44 +00:00
stekkel
9767e2393c Remove sqsetcookieflush call (not needed) 2007-01-13 14:04:39 +00:00
pdontthink
717be5c30c Massive update to plugin system architecture. Please test! Not all core plugins are tested yet, please point out issues that need to be fixed. Please see http://marc.theaimsgroup.com/?t=116282394000001&r=1&w=2 2006-12-10 05:07:54 +00:00
pdontthink
3b05f3adc4 Allow sqimap_login() to return error string when connection fails; would be nice if we had an error code system instead; the extent to which HTML is buried in error messages in the core like here is indicative of just how far away SM's architecture is from a good modularized system that is truly ready for t12n and a good API. 2006-11-11 20:05:23 +00:00
pdontthink
93fb75d405 Doc fix 2006-11-11 08:24:25 +00:00
pdontthink
6692d38bd8 Long time in coming: allow sqimap_login() to return even if connection failed. Useful in many places, including the new API library. 2006-11-11 08:13:12 +00:00
Alexandros Vellis
0f2d1a970e Fix for namespace parsing. UWash has a namespace prefix without a delimiter, which is perfectly legal. 2006-11-02 12:54:14 +00:00
Alexandros Vellis
49c78a9b56 NAMESPACE support in IMAP backend. Also a whitespace fix. 2006-10-10 12:48:44 +00:00
Alexandros Vellis
2b54ac2f41 Support for authz authorization identity in the IMAP backend. 2006-10-09 11:38:32 +00:00
stekkel
01181a5333 Fix for bug #1562271
* OK [PARSE] Unexpected characters at end of address: {SET:debug=51}
Triggered literal fetching from the imap stream whil {SET:debug=51} is not
an integer and not meant as literal.
2006-10-04 19:25:25 +00:00
pdontthink
60a03d0894 Wrong variable name used 2006-09-04 18:06:28 +00:00
tokul
59ae6f3ac2 removing trailing ?> from function scripts 2006-07-15 12:01:32 +00:00
Alexandros Vellis
95296e46ea Fix capability retrieval for "double" cases in server capability response, for instance in a new Cyrus: SORT SORT=MODSEQ . This patch will eliminate a notice that was displayed. 2006-05-26 12:53:18 +00:00
tokul
4115a9110e updating error_box() function calls. second argument was modified.
using squirrelmail template code for closing html tags.
added some comments in footer.tpl in order to detect generated footer
2006-05-14 17:09:29 +00:00
tokul
ca0bf2e239 if $key is set to false, sqimap_login() function will use sqauth_read_password()
to retrieve user password.
sqimap_login() calls in plugins are modified to use this code.
It allows to centralize place that is used to access password information.

Older way is preserved for backwards compatibility and different IMAP login
credentials.
2006-04-19 18:03:24 +00:00
stekkel
0a70f643f2 Centralized init 2006-04-05 00:22:11 +00:00
stekkel
1ca59fc121 Fix for updating the mailbox cache concernig flags 2006-03-17 17:48:31 +00:00
stekkel
ac5f37ba81 possible fix for unsolicited fetch responses during select call (IA Mail
Server v.5.3 Corporate Edition
2006-03-09 18:22:47 +00:00
jangliss
b25a3ff9bf Make the use_*_tls options half respect old values. If you leave it as
true, then it would try to use STARTTLS.  While I understand this is a
new feature, and this is the dev branch, a little backwards compatibility
is easy in this case.  The value 2 is considered true... Using === instead
is an exact match, so you'd have to have 2 in the use_*_tls options for it
to trigger starttls mode.
2006-02-26 06:32:17 +00:00
stekkel
fa2f6d41b0 removing global 2006-02-11 15:20:06 +00:00
stekkel
f28f5bb0eb Fix for #1093360.
The fix also includes the move from manual generated error messages in
imap_general to the central error handler.
In order to catch non fatal error message in compose.php I had to collect
the error messages array before the header redirect and write them to the
session. In read_body.php, compose.php and right_main.php I add the error
messages to the error handler again and clean up the delayed error messages
array.
I also modified the error handler in order to display the page_header in
case it wasn't displayed yet.
2006-02-11 15:14:31 +00:00
stekkel
75f2ab158a Patches from Michael Long
* implementing imap status cache in order to reduce
the amount of status calls generated from the newmail and filter plugin.
* enable the cumulative message account in left_main.php again

Patches reviewed by me. I fixed a few small things in newmail and I added RECENT status
calls in imap_mailbox.php in order to make the "only check recent mail"
option work.
2006-02-10 22:16:07 +00:00
stekkel
cc915a806f Better error reporting 2006-02-08 08:00:10 +00:00
tokul
7238caedc3 adding sm-1.4 version 2006-02-06 07:19:15 +00:00
Fredrik Jervfors
91cda79db6 Removing trailing spaces from strings. 2006-02-01 09:25:11 +00:00
tokul
450003d75f ipv6 address must be in [] 2006-01-29 11:18:22 +00:00
tokul
57ae2c61ce Added IMAP and SMTP STARTTLS extension support.
Saved SMTP EHLO response in class parameters.
Moved sanitizing of SMTP errors from delivery class to display scripts.
Allowed to use configtest.php when client_ip matches server_ip.
There is no 1.3.3 version. TLS was introduced in 1.4.0.
2006-01-28 19:24:08 +00:00
tokul
83fdb4c332 copyright update 2006-01-23 18:46:41 +00:00
jangliss
ab752cb29a Missed a ) 2006-01-16 15:00:33 +00:00
jangliss
4946845618 Saved additional calls to NAMESPACE if it was already saved in the session
by redirect.php.  Suggestion from Michael Long.
2006-01-15 18:54:35 +00:00