Aleksander Machniak
40fe66b71e
Fix reference to non-existing blank.tif file in mime_content_type check
2016-10-06 21:11:24 +02:00
Aleksander Machniak
638afafbd2
Make so rcmail.log() depends on devel_mode ( #5193 )
2016-10-04 17:19:45 +02:00
Aleksander Machniak
650ac8befb
Fix displaying size of attachments with zero size
2016-09-10 09:58:23 +02:00
Victor Benincasa
daeb66ee99
Fix login form
...
Fix a small bug introduced on commit 43f3c5f that breaks the login form ($attrib['form'] is checked at line 1899, so it cannot be unset).
2016-08-26 05:31:28 -03:00
Aleksander Machniak
32e5a6bbcf
Fix bug where folder creation could fail if personal namespace contained more than one entry ( #5403 )
...
+ small code improvements
2016-08-26 09:25:24 +02:00
Aleksander Machniak
873e0353cf
Use smart-upload-button for messages and contact photos upload
...
Unified interface with rcmail::upload_form().
2016-08-24 12:54:30 +02:00
Aleksander Machniak
43f3c5fb2a
Implement "one click" attachment upload ( #5024 )
2016-08-20 19:38:48 +02:00
Aleksander Machniak
9debc38724
Drop mail_header_delimiter option, since we don't use mail() we don't need it
2016-08-19 08:55:29 +02:00
Aleksander Machniak
184de7735c
CS fixes (mostly phpdoc)
2016-08-18 08:50:59 +02:00
Aleksander Machniak
ebc2f5dc7d
Add possibility to rename attachments in mail compose ( #4996 )
...
... and fix some small issues related to the new compose attachment menu feature
2016-07-30 09:05:49 +02:00
Aleksander Machniak
8a13615e9e
Add possibility to preview and download attachments in mail compose ( #5053 )
2016-07-28 19:08:19 +02:00
Aleksander Machniak
e1165fed89
Remove backward compatibility "layer" of bc.php ( #4902 ) - now for real
2016-07-23 11:47:13 +02:00
Aleksander Machniak
4361a95820
Fix missing localization of HTML editor when assets_dir != INSTALL_PATH
2016-07-19 12:05:41 +02:00
Aleksander Machniak
9e64dc2deb
Remove application/x-tar file extension test as it might not exist in nginx config ( #5253 )
...
Use text/css instead
2016-05-20 14:36:45 +02:00
Aleksander Machniak
9634169647
Bump version number to 1.3-beta
2016-05-02 14:37:39 +02:00
Aleksander Machniak
a0f38f5fd8
Small code style improvements
2016-04-12 13:46:30 +02:00
Aleksander Machniak
4e6f3019f5
Enigma: Handle encrypted/signed content inside message/rfc822 attachments
2016-03-25 13:25:44 +01:00
Aleksander Machniak
3a13b5dab8
CS fixes
2016-03-14 09:18:53 +01:00
Aleksander Machniak
0c9e55b0c9
Fix PHP warning when defaults.inc.php is not readable
2016-03-14 08:41:28 +01:00
Thomas Bruederli
4a408843b0
Protect download urls against CSRF using unique request tokens ( #1490642 )
...
Send X-Frame-Options headers with every HTTP response
2016-03-06 14:31:07 +01:00
Aleksander Machniak
10e5192a2b
Fix path traversal vulnerability in setting a skin ( #1490620 )
2015-12-22 12:40:36 +01:00
Aleksander Machniak
69a1e4f7b1
rcube_parse_host() -> rcube_utils::parse_host()
2015-11-25 08:52:59 +01:00
Aleksander Machniak
7476410a04
Add missing deprecation warning
2015-11-17 09:36:43 +01:00
Thomas Bruederli
458a6b26e8
Load bc.inc in script startup
2015-11-16 22:47:28 +01:00
Thomas Bruederli
32695c333c
Restore bc.inc which now logs a warning when calling deprecated functions
2015-11-16 22:43:15 +01:00
Aleksander Machniak
a15d877ba8
Added brute-force attack prevention via login rate limit ( #1490566 )
2015-11-11 18:53:43 +01:00
Aleksander Machniak
454b0b1ca9
Remove deprecated rcmail and rcube_imap methods
2015-11-05 09:17:28 +01:00
Aleksander Machniak
2aa9ee56fd
Fix so disabling emoticons plugin really removes emoticons button from HTML editor
2015-10-27 17:18:23 +01:00
dsoares
234fd19505
Replace deprecated call to Q within array_map()
2015-10-26 16:13:14 +00:00
Aleksander Machniak
74ce01efc7
Q() -> rcube::Q()
2015-10-23 08:02:57 +02:00
Aleksander Machniak
a5c03db798
Security: Added options to validate username/password on logon ( #1490500 )
2015-10-18 09:37:46 +02:00
Aleksander Machniak
c1bbf0d0b6
After failed login wait a second to slow down brute-force attacks ( #1490549 )
2015-10-17 13:37:11 +02:00
Aleksander Machniak
fddfd8e6d7
Remove backward compatibility "layer" of bc.php ( #1490534 )
2015-10-16 19:51:28 +02:00
Aleksander Machniak
df0b4f3437
Make sure an email address is valid when replacing it with mailto: link
2015-09-15 12:52:18 +02:00
Aleksander Machniak
26086981a2
Improve randomness of security tokens ( #1490529 )
2015-09-08 17:38:19 +02:00
Aleksander Machniak
e2f605d44d
Fallback to C locale
2015-09-04 10:13:25 +02:00
Aleksander Machniak
3c29c7e858
Fix various issues with Turkish (and similar) locales ( #1490519 )
2015-09-04 10:09:47 +02:00
Aleksander Machniak
c4daf3f14f
Fix regression in converting signatures to text, fixed PHP warning in html2text() call
2015-08-30 18:41:13 +02:00
Aleksander Machniak
a63f14ec40
Emoticons-related code refactoring
...
- Emoticons: All emoticons-related functionality is handled by the plugin now
- Emoticons: Added option to switch on/off emoticons in compose editor (#1485732 )
- Emoticons: Added option to switch on/off emoticons in plain text messages
- Plugin API: Added disabled_plugins an disabled_buttons options in html_editor hook
- Plugin API: Added html2text hook
2015-08-29 07:52:57 +02:00
Aleksander Machniak
1b39d9a6c7
PHP7: Fixed some E_WARNING errors that previously were E_STRICT
2015-08-08 09:32:24 +02:00
Aleksander Machniak
93e64008a6
Small code improvements
2015-08-05 09:30:51 +02:00
Aleksander Machniak
08bb20f261
Don't use deprecated functions/constants (from bc.inc)
2015-08-02 20:16:46 +02:00
Aleksander Machniak
9d78c68cbf
Fix so imap folder attribute comparisons are case-insensitive ( #1490466 )
...
+ make in_array_nocase() much faster for ASCII strings
2015-07-29 20:38:21 +02:00
Aleksander Machniak
252cc4c4ac
Password: Allow temporarily disabling the plugin functionality with a notice
2015-07-27 10:47:34 +02:00
Aleksander Machniak
8447bae77c
Require Mbstring and OpenSSL extensions ( #1490415 ) - remove redundant code
2015-06-28 12:27:48 +02:00
Aleksander Machniak
a958748947
CS fixes
2015-06-07 15:26:33 +02:00
Aleksander Machniak
b782815dac
Fix XSS vulnerability in _mbox argument handling ( #1490417 )
2015-05-30 17:37:06 +02:00
Aleksander Machniak
8042e13af6
Add --config and --type options to moduserprefs.sh script ( #1490051 )
2015-05-25 08:51:10 +02:00
Aleksander Machniak
3994b3a26c
Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key ( #1490402 )
2015-05-23 09:42:11 +02:00
Aleksander Machniak
0c08b04778
Fix issues when using moduserprefs.sh without --user argument ( #1490399 )
2015-05-21 10:19:46 +02:00