Commit Graph

2223 Commits

Author SHA1 Message Date
Aleksander Machniak
40fe66b71e Fix reference to non-existing blank.tif file in mime_content_type check 2016-10-06 21:11:24 +02:00
Aleksander Machniak
638afafbd2 Make so rcmail.log() depends on devel_mode (#5193) 2016-10-04 17:19:45 +02:00
Aleksander Machniak
650ac8befb Fix displaying size of attachments with zero size 2016-09-10 09:58:23 +02:00
Victor Benincasa
daeb66ee99 Fix login form
Fix a small bug introduced on commit 43f3c5f that breaks the login form ($attrib['form'] is checked at line 1899, so it cannot be unset).
2016-08-26 05:31:28 -03:00
Aleksander Machniak
32e5a6bbcf Fix bug where folder creation could fail if personal namespace contained more than one entry (#5403)
+ small code improvements
2016-08-26 09:25:24 +02:00
Aleksander Machniak
873e0353cf Use smart-upload-button for messages and contact photos upload
Unified interface with rcmail::upload_form().
2016-08-24 12:54:30 +02:00
Aleksander Machniak
43f3c5fb2a Implement "one click" attachment upload (#5024) 2016-08-20 19:38:48 +02:00
Aleksander Machniak
9debc38724 Drop mail_header_delimiter option, since we don't use mail() we don't need it 2016-08-19 08:55:29 +02:00
Aleksander Machniak
184de7735c CS fixes (mostly phpdoc) 2016-08-18 08:50:59 +02:00
Aleksander Machniak
ebc2f5dc7d Add possibility to rename attachments in mail compose (#4996)
... and fix some small issues related to the new compose attachment menu feature
2016-07-30 09:05:49 +02:00
Aleksander Machniak
8a13615e9e Add possibility to preview and download attachments in mail compose (#5053) 2016-07-28 19:08:19 +02:00
Aleksander Machniak
e1165fed89 Remove backward compatibility "layer" of bc.php (#4902) - now for real 2016-07-23 11:47:13 +02:00
Aleksander Machniak
4361a95820 Fix missing localization of HTML editor when assets_dir != INSTALL_PATH 2016-07-19 12:05:41 +02:00
Aleksander Machniak
9e64dc2deb Remove application/x-tar file extension test as it might not exist in nginx config (#5253)
Use text/css instead
2016-05-20 14:36:45 +02:00
Aleksander Machniak
9634169647 Bump version number to 1.3-beta 2016-05-02 14:37:39 +02:00
Aleksander Machniak
a0f38f5fd8 Small code style improvements 2016-04-12 13:46:30 +02:00
Aleksander Machniak
4e6f3019f5 Enigma: Handle encrypted/signed content inside message/rfc822 attachments 2016-03-25 13:25:44 +01:00
Aleksander Machniak
3a13b5dab8 CS fixes 2016-03-14 09:18:53 +01:00
Aleksander Machniak
0c9e55b0c9 Fix PHP warning when defaults.inc.php is not readable 2016-03-14 08:41:28 +01:00
Thomas Bruederli
4a408843b0 Protect download urls against CSRF using unique request tokens (#1490642)
Send X-Frame-Options headers with every HTTP response
2016-03-06 14:31:07 +01:00
Aleksander Machniak
10e5192a2b Fix path traversal vulnerability in setting a skin (#1490620) 2015-12-22 12:40:36 +01:00
Aleksander Machniak
69a1e4f7b1 rcube_parse_host() -> rcube_utils::parse_host() 2015-11-25 08:52:59 +01:00
Aleksander Machniak
7476410a04 Add missing deprecation warning 2015-11-17 09:36:43 +01:00
Thomas Bruederli
458a6b26e8 Load bc.inc in script startup 2015-11-16 22:47:28 +01:00
Thomas Bruederli
32695c333c Restore bc.inc which now logs a warning when calling deprecated functions 2015-11-16 22:43:15 +01:00
Aleksander Machniak
a15d877ba8 Added brute-force attack prevention via login rate limit (#1490566) 2015-11-11 18:53:43 +01:00
Aleksander Machniak
454b0b1ca9 Remove deprecated rcmail and rcube_imap methods 2015-11-05 09:17:28 +01:00
Aleksander Machniak
2aa9ee56fd Fix so disabling emoticons plugin really removes emoticons button from HTML editor 2015-10-27 17:18:23 +01:00
dsoares
234fd19505 Replace deprecated call to Q within array_map() 2015-10-26 16:13:14 +00:00
Aleksander Machniak
74ce01efc7 Q() -> rcube::Q() 2015-10-23 08:02:57 +02:00
Aleksander Machniak
a5c03db798 Security: Added options to validate username/password on logon (#1490500) 2015-10-18 09:37:46 +02:00
Aleksander Machniak
c1bbf0d0b6 After failed login wait a second to slow down brute-force attacks (#1490549) 2015-10-17 13:37:11 +02:00
Aleksander Machniak
fddfd8e6d7 Remove backward compatibility "layer" of bc.php (#1490534) 2015-10-16 19:51:28 +02:00
Aleksander Machniak
df0b4f3437 Make sure an email address is valid when replacing it with mailto: link 2015-09-15 12:52:18 +02:00
Aleksander Machniak
26086981a2 Improve randomness of security tokens (#1490529) 2015-09-08 17:38:19 +02:00
Aleksander Machniak
e2f605d44d Fallback to C locale 2015-09-04 10:13:25 +02:00
Aleksander Machniak
3c29c7e858 Fix various issues with Turkish (and similar) locales (#1490519) 2015-09-04 10:09:47 +02:00
Aleksander Machniak
c4daf3f14f Fix regression in converting signatures to text, fixed PHP warning in html2text() call 2015-08-30 18:41:13 +02:00
Aleksander Machniak
a63f14ec40 Emoticons-related code refactoring
- Emoticons: All emoticons-related functionality is handled by the plugin now
- Emoticons: Added option to switch on/off emoticons in compose editor (#1485732)
- Emoticons: Added option to switch on/off emoticons in plain text messages
- Plugin API: Added disabled_plugins an disabled_buttons options in html_editor hook
- Plugin API: Added html2text hook
2015-08-29 07:52:57 +02:00
Aleksander Machniak
1b39d9a6c7 PHP7: Fixed some E_WARNING errors that previously were E_STRICT 2015-08-08 09:32:24 +02:00
Aleksander Machniak
93e64008a6 Small code improvements 2015-08-05 09:30:51 +02:00
Aleksander Machniak
08bb20f261 Don't use deprecated functions/constants (from bc.inc) 2015-08-02 20:16:46 +02:00
Aleksander Machniak
9d78c68cbf Fix so imap folder attribute comparisons are case-insensitive (#1490466)
+ make in_array_nocase() much faster for ASCII strings
2015-07-29 20:38:21 +02:00
Aleksander Machniak
252cc4c4ac Password: Allow temporarily disabling the plugin functionality with a notice 2015-07-27 10:47:34 +02:00
Aleksander Machniak
8447bae77c Require Mbstring and OpenSSL extensions (#1490415) - remove redundant code 2015-06-28 12:27:48 +02:00
Aleksander Machniak
a958748947 CS fixes 2015-06-07 15:26:33 +02:00
Aleksander Machniak
b782815dac Fix XSS vulnerability in _mbox argument handling (#1490417) 2015-05-30 17:37:06 +02:00
Aleksander Machniak
8042e13af6 Add --config and --type options to moduserprefs.sh script (#1490051) 2015-05-25 08:51:10 +02:00
Aleksander Machniak
3994b3a26c Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key (#1490402) 2015-05-23 09:42:11 +02:00
Aleksander Machniak
0c08b04778 Fix issues when using moduserprefs.sh without --user argument (#1490399) 2015-05-21 10:19:46 +02:00