Commit Graph

1061 Commits

Author SHA1 Message Date
Aleksander Machniak
b2bebe531a Fix bug where usernames without domain part could be malformed or converted to lower-case on logon (#6224) 2018-04-10 09:24:29 +02:00
Aleksander Machniak
8df6d7c3e4 Fix regression in compressMessageSet() (#6235) 2018-04-06 08:21:22 +02:00
Aleksander Machniak
8b0540d402 Fix possible IMAP command injection and type juggling vulnerabilities (#6229) 2018-04-03 19:07:02 +02:00
Aleksander Machniak
df3878501c Fix PHP 7.2: count(): Parameter must be an array in enchant-based spellchecker (#6234) 2018-04-03 18:14:55 +02:00
Aleksander Machniak
73ea8f94d0 Use htmlspecialchars() with charset argument, simplify some code 2018-04-03 15:29:59 +02:00
Aleksander Machniak
f36e23b778 Fix parsing date strings (e.g. from a Date: mail header) with comments (#6216) 2018-03-18 19:22:09 +01:00
Aleksander Machniak
2196f50437 Support redis_debug in the redis session driver 2018-03-10 15:42:46 +01:00
Aleksander Machniak
0f3ad342f7 Fix bug where some unix timestamps were not handled correctly by rcube_utils::anytodatetime() (#6212) 2018-03-09 09:32:44 +01:00
Aleksander Machniak
a451ad6599 Fix handling encoding of HTML tags in "inline" JSON output (#6207) 2018-03-07 17:40:12 +01:00
Aleksander Machniak
981cd8726d Remove holes in cache index keys - makes the serialized representation shorter 2018-03-07 09:14:05 +01:00
Aleksander Machniak
1058924e21 Move some framework classes to sub-directories 2018-03-03 17:46:59 +01:00
Aleksander Machniak
d07b032bcd Refactor cache code with separate engine-specific classes 2018-03-03 17:28:40 +01:00
Aleksander Machniak
fa06d37901 Merge branch 'feature/add_redis_as_cache' of https://github.com/ledgr/roundcubemail into ledgr-feature/add_redis_as_cache 2018-03-02 17:25:50 +01:00
Aleksander Machniak
6bfebc5e32 Add sanity check when auto-unsubscribing non-existing folders 2018-03-01 21:01:01 +01:00
Aleksander Machniak
1556eb01c7 Use JSON_UNESCAPED_UNICODE only on PHP >= 7.1.0 (#6187) 2018-02-21 10:55:14 +01:00
laodc
672e57ea48 Patched bug where rcube_db::quote() was causing an infinite connection loop. (#6175)
As rcube_db::quote() checks to see if the connection is up before quoting, this would cause the class to try connect again, as rcube_db::$dbh was not being set until AFTER conn_configure was completed, causing a loop.

So updated rcube_db::$dbh in the rcube::conn_create() function instead allowing access to the new object straight away.

It's needed for edeb5d7.
2018-02-19 10:48:06 +01:00
Aleksander Machniak
a1be62b19d Remove redundant trim() 2018-02-15 08:59:59 +01:00
Aleksander Machniak
9d2b303b51 Fix bug in remote content blocking on HTML image and style tags (#6178) 2018-02-14 20:19:32 +01:00
Aleksander Machniak
b46cd5de1d Fix PHP Warning: exif_read_data(...): Illegal IFD size (#6169) 2018-02-12 15:48:23 +01:00
Edgaras Lukoševičius
e371469664 Add Redis as cache backend 2018-02-01 16:30:19 +02:00
laodc
edeb5d7ab4 Add support for PostgreSQL schemas in DSN (#6150)
If schema is set in the dsn, set search_path to the schema value.

Example:

$config['db_dsnw'] = 'pgsql://user:pass@localhost/dbname?schema=exampleschema';
2018-01-30 07:51:54 +01:00
Aleksander Machniak
4793ec753a Remove double-quotes in filename* parameter of the Content-Disposition of downloads (#5857) 2018-01-14 10:10:20 +01:00
Aleksander Machniak
55e99398e1 Fix possible information leak - add more strict sql error check on user creation (#6125) 2018-01-11 16:13:13 +01:00
Aleksander Machniak
ce338164e3 Fix bug where contacts search could skip some records (#6130) 2018-01-10 11:52:35 +01:00
Richard Hillmann
59bbf6c081 Fix preg_match in guess_type function (#6123) 2018-01-07 08:47:59 +01:00
Aleksander Machniak
b172fb505c Improve trusted_host_patterns code 2018-01-01 11:10:53 +01:00
Aleksander Machniak
4a5ca74724 Merge branch 'trusted-host-patterns' of https://github.com/dsoares/roundcubemail into dsoares-trusted-host-patterns 2018-01-01 10:26:09 +01:00
Daniel Kesselberg
a8d5547163 Update idn convertion methods (#6115)
* Add more test cases
* Update phpdoc
2017-12-31 13:22:48 +01:00
Aleksander Machniak
63a7d2313f Improve SMTPUTF8 support and fix relaxed email validation issues 2017-12-31 13:14:31 +01:00
Aleksander Machniak
5665344673 Merge branch 'smtputf8' of https://github.com/jprjr/roundcubemail into jprjr-smtputf8 2017-12-31 12:18:05 +01:00
Aleksander Machniak
a2875cdda9 - Fix searching contacts by address in LDAP source (#6084) 2017-12-26 08:34:21 +00:00
Aleksander Machniak
c0959bd619 Sanity checks for header data length in FETCH (#6087)
Where we know what expected data length is we truncate the input.
2017-12-13 09:06:40 +01:00
Aleksander Machniak
3cdc8af297 Fix possible performance issue when parsing malformed and long Date header (#6087) 2017-12-12 21:22:22 +01:00
johndoh
05d1b1947e Check for minified CSS files (#6089) 2017-12-12 19:51:17 +01:00
Aleksander Machniak
3488531b26 Fix PHP Warning: Use of undefined constant INTL_IDNA_VARIANT_UTS46 on servers without php-intl extension 2017-12-06 15:52:02 +01:00
Georgeto
161038ee87 Support additional connect parameters in PostgreSQL database wrapper (#6071)
Most notably this change enables you to specify whether or with what
priority a secure SSL TCP/IP connection will be negotiated with the
database server.
2017-12-06 08:16:59 +01:00
Aleksander Machniak
61a6666eee Small CS fixes 2017-12-04 09:16:21 +01:00
Aleksander Machniak
ca39a4e093 Fix PHP warning "idn_to_utf8(): INTL_IDNA_VARIANT_2003 is deprecated" with PHP 7.2 (#6075) 2017-12-03 10:41:41 +01:00
Aleksander Machniak
36638ec0c2 Fix untagged COPYUID responses handling - again (#5982) 2017-11-20 18:05:07 +01:00
Aleksander Machniak
9ce8948294 Get rid of the 2nd argument of include_stylesheet()
.. make the optional behavior default now.
2017-11-20 14:03:07 +01:00
Aleksander Machniak
1cf72fa2b6 Allow plugins to include Less files (#6051) 2017-11-20 13:48:07 +01:00
Aleksander Machniak
c6b2d8bead Merge branch 'dev-elastic' 2017-11-19 13:23:40 +01:00
Aleksander Machniak
4cb7713520 Fix checking table columns when there's more schemas/databases in postgres/mysql (#6047) 2017-11-18 10:06:28 +01:00
Aleksander Machniak
a6c37b7735 Fix broken long filenames when using imap4d server - workaround server bug (#6048) 2017-11-17 14:29:57 +01:00
Aleksander Machniak
eed4be3ba6 Display value of the SMTP message size limit in the error message (#6032) 2017-11-17 12:33:31 +01:00
Aleksander Machniak
4dc1f3b757 Use configured log_file_ext also for errors thrown by PHP (#6035) 2017-11-10 20:02:17 +01:00
Aleksander Machniak
910c735b87 Merge branch 'master' into dev-elastic 2017-11-08 15:00:53 +01:00
Aleksander Machniak
a0374f3c45 Fix mangled non-ASCII characters in links in HTML messages (#6028) 2017-11-08 12:38:19 +01:00
Aleksander Machniak
23af0b7f36 Merge branch 'master' into dev-elastic 2017-11-07 20:50:01 +01:00
dsoares
5282cbaff9 Check against trusted_host_patterns in rcube_utils::parse_host() 2017-11-07 14:39:57 +00:00