Commit Graph

221 Commits

Author SHA1 Message Date
Aleksander Machniak
24b4ca52cf Fix so "Action disabled" error uses more appropriate 404 code (#5440) 2016-09-21 09:03:37 +02:00
Aleksander Machniak
b77efcd104 Fix typo 2016-06-29 09:02:59 +02:00
Aleksander Machniak
85082c88c7 CS fixes 2016-06-29 08:58:59 +02:00
Aleksander Machniak
9634169647 Bump version number to 1.3-beta 2016-05-02 14:37:39 +02:00
Aleksander Machniak
a15d877ba8 Added brute-force attack prevention via login rate limit (#1490566) 2015-11-11 18:53:43 +01:00
Aleksander Machniak
1b39d9a6c7 PHP7: Fixed some E_WARNING errors that previously were E_STRICT 2015-08-08 09:32:24 +02:00
Aleksander Machniak
4b72a1f498 Fix error when using back button after sending an email (#1490009) 2015-07-31 18:48:17 +02:00
Aleksander Machniak
a958748947 CS fixes 2015-06-07 15:26:33 +02:00
Aleksander Machniak
3779b67a9c Set version number to 1.2-git 2015-02-16 11:22:13 +01:00
Thomas Bruederli
2f8b1036da Bump version and copyright year 2015-02-07 18:33:24 +01:00
Aleksander Machniak
681ba6fc3c Improve system security by using optional special URL with security token
Allows to define separate server/path for image/js/css files
Fix bugs where CSRF attacks were still possible on some requests
2014-12-16 13:28:48 +01:00
Thomas Bruederli
c45507e317 Fix login error message display broken in b51de327 2014-10-14 21:47:15 +02:00
Thomas Bruederli
b51de3279f Display custom error messages from plugins hooks (as documented in the API spec) 2014-10-14 15:13:49 +02:00
Thomas Bruederli
a873d934f5 Give precedence to plugin.* actions over custom tasks registered by plugins 2014-08-27 14:37:52 +02:00
Aleksander Machniak
d01f9fc7f5 Add option (disabled_actions) to disable UI elements/actions (#1489638) 2014-08-04 19:03:27 +02:00
Thomas Bruederli
7e7e451b66 Warn for unsent/unsaved message when closing compose window; remove localStorage copy if page was left intentionally but not on session errors (#1489818) 2014-07-09 10:55:25 +02:00
Aleksander Machniak
d19a9b35cc Remove obsolete code that disables session check on 'send' action 2014-07-08 11:53:52 +02:00
Aleksander Machniak
ba5c53e5c3 Send X-UA-Compatible as HTTP header instead of meta tag 2014-06-09 14:16:35 +02:00
Aleksander Machniak
b360f707e8 Small code improvement 2014-05-12 14:36:09 +02:00
Aleksander Machniak
65f59fa3c6 Bump version number to 1.1-git 2014-03-19 08:49:55 +01:00
Aleksander Machniak
8d3d5b42b7 Prevent from "Call to undefined method rcmail_output_json::add_footer()" error 2014-02-21 16:26:37 +01:00
Aleksander Machniak
0301d9347f CS fixes 2014-01-01 12:31:14 +01:00
Thomas Bruederli
85e60ada15 First version of the local storage compose data saving feature; some behavioral improvements and encrytion are still to be added 2013-11-10 14:04:33 +01:00
Thomas Bruederli
b461a2d72e Send last fetch time with 'refresh' requests and allow plugins to alter query parameters of http requests 2013-10-21 16:03:03 +02:00
Aleksander Machniak
060467df9d Log also failed logins to userlogins log 2013-09-02 11:45:28 +02:00
Thomas Bruederli
deb2b8d080 Allow to load config files for different environments (#1487311); keep (non-default) filename in URLs throughout the webmail app 2013-07-12 10:17:32 +02:00
Aleksander Machniak
a544971fe8 Fix error when using check_referer=true 2013-04-24 13:27:29 +02:00
Aleksander Machniak
bb080af14d Bump version number up to 1.0-git 2013-03-15 12:53:02 +01:00
Thomas Bruederli
18e23ab763 Welcome to 2013 2013-01-09 17:50:51 +01:00
Aleksander Machniak
a95687cfe8 Plugin API: Add 'refresh' hook 2012-11-12 14:33:22 +01:00
Aleksander Machniak
77de23fa93 Added cross-task 'refresh' request for system state updates 2012-11-11 10:32:05 +01:00
Aleksander Machniak
b807084a6b - Fix (disable) request validation for spell and spell_html actions
Consider action whitelist also for ajax requests
2012-08-08 08:55:46 +02:00
Aleksander Machniak
2bbc3da52a - Check request tokens also in devel_mode 2012-08-08 08:44:46 +02:00
Aleksander Machniak
1c0ce1fe52 Plugin API: Add 'unauthenticated' hook (#1488138) 2012-07-05 15:42:33 +02:00
Aleksander Machniak
7c8fd80310 Show explicit error message when provided hostname is invalid (#1488550) 2012-06-30 18:41:18 +02:00
Aleksander Machniak
041c93ce0b Removed $Id$ 2012-05-22 12:31:37 +02:00
Brian Ronald
b546b0dcfd Also, the license comments 2012-05-09 10:34:48 +01:00
alecpl
d2191c619f - Fix redirect to mail/compose on re-login (1488226) 2012-04-26 12:23:41 +00:00
alecpl
1aceb9cec8 - Framework refactoring (I hope it's the last one):
rcube,rcmail,rcube_ui -> rcube,rcmail,rcube_utils
  renamed main.inc into rcube_bc.inc
2012-04-16 11:02:21 +00:00
alecpl
0c259682f6 - Merge devel-framework branch, resolved conflicts 2012-04-13 08:52:02 +00:00
thomascube
7fe3811c65 Changed license to GNU GPLv3+ with exceptions for skins and plugins 2012-01-18 11:10:46 +00:00
thomascube
c321a955a7 Merged devel-framework branch (r5746:5779) back into trunk 2012-01-16 15:14:41 +00:00
alecpl
fdff34093d - Move some checks into login() method 2012-01-03 09:56:19 +00:00
alecpl
b6da0b76af - Remove deprecated global $IMAP variable usage (#1488148) 2011-12-07 10:41:15 +00:00
alecpl
80216d0b79 - Change version number to 0.8-svn 2011-11-24 07:41:37 +00:00
thomascube
abdf31486a Allow cross-task ajax requests 2011-10-30 11:34:31 +00:00
alecpl
3703021713 - Plugin API: added 'ready' hook (#1488073) 2011-10-07 10:25:23 +00:00
thomascube
502436dad0 We're on the road towards 0.7 now 2011-09-29 07:00:34 +00:00
alecpl
9e54e6fd45 - Make the whole PHP output non-cacheable (#1487797) 2011-09-23 10:11:27 +00:00
thomascube
6354da5b8c Fix r5117: don't show error on default login page 2011-08-24 16:18:54 +00:00