Aleksander Machniak
b782815dac
Fix XSS vulnerability in _mbox argument handling ( #1490417 )
2015-05-30 17:37:06 +02:00
Aleksander Machniak
8042e13af6
Add --config and --type options to moduserprefs.sh script ( #1490051 )
2015-05-25 08:51:10 +02:00
Aleksander Machniak
3994b3a26c
Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key ( #1490402 )
2015-05-23 09:42:11 +02:00
Aleksander Machniak
0c08b04778
Fix issues when using moduserprefs.sh without --user argument ( #1490399 )
2015-05-21 10:19:46 +02:00
Aleksander Machniak
03aa84f784
Fix bug where some files could have "executable" extension when stored in temp folder ( #1490377 )
2015-05-17 14:52:24 +02:00
Aleksander Machniak
e7620812b0
Installer: Remove system() function use ( #1490139 )
...
Move some functionality of scripts from bin/ into rcmail_utils class
2015-04-12 09:24:25 +02:00
Thomas Bruederli
0bd99db08d
Localize common error messages; improve explanation for CSRF check failures
2015-03-23 18:33:40 +01:00
Aleksander Machniak
216b31dd99
Fix so "over quota" errors are displayed also in message compose page
...
This also fixes over quota responses on cyrus imap which uses "Over quota" string and no error identifier.
2015-02-25 05:24:05 -05:00
Aleksander Machniak
f070da7c27
Fix fatal errors on systems without mbstring extension or mb_regex_encoding() function ( #1490280 )
2015-02-22 11:47:14 +01:00
Aleksander Machniak
3665d1e8ec
Merge pull request #259 from corbosman/plugin_preload
...
Plugin preload
2015-02-19 08:31:43 +01:00
Aleksander Machniak
3779b67a9c
Set version number to 1.2-git
2015-02-16 11:22:13 +01:00
Thomas Bruederli
2f8b1036da
Bump version and copyright year
2015-02-07 18:33:24 +01:00
corbosman
de89d46be2
Load plugins before sessions have started
...
Move the plugin loading phase to before sessions have started allowing plugins to add session drivers. Plugins that want to use this should define an "onload" method in their plugins. This method does not have access to variables like $task as they are not yet initialised at that time.
2015-02-04 13:17:51 +01:00
Aleksander Machniak
09d52dbb67
Fix some typos in comments
2015-02-04 10:46:14 +01:00
Thomas Bruederli
be140e827d
Don't reset 'plugins' config option when running from update.sh script
2015-02-03 22:43:47 +01:00
Aleksander Machniak
c6efcf5e6d
Fix blocked.gif image usage with assets_dir set
2015-01-12 05:44:28 -05:00
Thomas Bruederli
b737021a90
Improve plugin selection in installer; check already selected plugins
2014-12-27 14:53:21 +01:00
Thomas B.
8e7ed506c4
Merge pull request #248 from flanpy/master
...
#1489096 : Ability to select plugins to enable in the installer
2014-12-21 20:25:23 +01:00
Aleksander Machniak
7259529fad
Get rid of requests whitelist for security check bypass
2014-12-16 13:34:48 +01:00
Aleksander Machniak
681ba6fc3c
Improve system security by using optional special URL with security token
...
Allows to define separate server/path for image/js/css files
Fix bugs where CSRF attacks were still possible on some requests
2014-12-16 13:28:48 +01:00
Aleksander Machniak
f7f4672649
Fix regression in rcmail::show_bytes() where unit was set to "[]" instead of "B"
2014-11-28 08:47:45 +01:00
Aleksander Machniak
0b36d15157
Add method to display operation (uploading) progress in UI message
2014-11-20 06:03:22 -05:00
Aleksander Machniak
2dfad0a564
Make upload progress text more compact.
...
E.g. "500 KB of 10 MB" becomes "0.5 of 10 MB"
2014-11-20 09:14:33 +01:00
Aleksander Machniak
9e4246d957
Code improvements and fixes (mostly unused variables and methods)
2014-11-16 14:04:53 +01:00
Flanpy
8f576d87d2
Add the ability to select plugins in the installer
2014-11-12 11:24:34 +01:00
Flanpy
b8837e3f43
Add the ability to enable plugins in the installer
2014-11-12 11:16:24 +01:00
Thomas Bruederli
8d526c4938
Fix skin path handling in plugin context ( #1488967 ):
...
The plugin skin directories are removed again from the search path after parsing of a plugin template has finished.
2014-11-03 16:15:44 +01:00
Aleksander Machniak
1ffab0ad4a
Fix possible issues in skin/skin_path config handling ( #1490125 )
2014-10-30 12:34:16 +01:00
Aleksander Machniak
71dbeeee10
Skip unnecessary session updates on task switch - switch session task less often ( #1490116 )
2014-10-25 16:45:33 +02:00
andryyy
383724eb97
Update rcmail.php
...
Typo
2014-10-07 19:14:13 +02:00
Thomas Bruederli
91a449138e
Add output class for commandline scripts
2014-09-23 17:38:03 +02:00
Aleksander Machniak
000f6ee304
Merge branch 'oracle'
2014-09-22 09:38:21 +02:00
Aleksander Machniak
c2345747ac
Add Oracle driver check in Installer
2014-09-18 16:57:41 +02:00
Thomas Bruederli
8ef203827f
Make noshow attribute for roundcube:label tags actually work as supposed
2014-09-18 09:01:30 +02:00
Aleksander Machniak
dcc4469844
Don't init output in CLI mode
...
Fixes infinite recurssion on raise_error() call when executing scripts
out of the INSTALL_PATH. Also use 'rcube' if 'rcmail' is not needed.
2014-09-10 16:32:28 +02:00
Aleksander Machniak
fec4f240e5
Seek vendor/autoload.php in install path to make tests working
2014-08-30 09:50:31 +02:00
Thomas Bruederli
a98a4f8bb5
Remove 3rd party libs from our repository and define the dependencies in composer.json-dist.
...
Also remove the ancient utf8 lib and replace it with 'Patchwork UTF-8 for PHP'.
For direct git checkouts, copy composer.json-dist into composer.json and run
`php composer.phar install` to install the dependencies.
2014-08-27 17:45:21 +02:00
Aleksander Machniak
5f58127eae
Added rcube_utils::resolve_url()
2014-08-24 11:43:12 +02:00
Aleksander Machniak
75bbada03b
Remove code for PHP<5.3, use PHP_VERSION_ID instead of version_compare() for version checks
2014-08-24 11:23:33 +02:00
Aleksander Machniak
e35eab5f94
Fix comm_path update on task switch ( #1490041 )
2014-08-22 08:52:29 +02:00
Thomas Bruederli
06fdaf88cb
Extend rcmail::url() to produce absolute and fully qualified URLs
2014-08-13 19:15:12 +02:00
Aleksander Machniak
d01f9fc7f5
Add option (disabled_actions) to disable UI elements/actions ( #1489638 )
2014-08-04 19:03:27 +02:00
Thomas Bruederli
d4783319a0
Set 'compose_extwin' env property on every step; accept a list of URL parameters for the 'compose' command
2014-07-28 09:39:43 +02:00
Aleksander Machniak
6b0106a324
Fix some mime-type to extension mapping checks in Installer ( #1489983 )
2014-07-22 19:10:42 +02:00
Aleksander Machniak
ef51ae6d19
Reset also page header/footer on "dummy frames" - to prevent js error e.g. if some script depends on jQuery
2014-07-02 18:20:19 +02:00
Aleksander Machniak
5312b71126
Allways return current folder from quota_content()
2014-06-30 12:33:07 +02:00
Aleksander Machniak
b8bcca7033
Display quota information for current folder not INBOX only ( #1487993 )
2014-06-30 12:26:15 +02:00
Aleksander Machniak
3cc1afa1c2
Support images in HTML signatures ( #1488676 )
...
This enables image button and file browser in html editor for signatures
2014-06-29 16:35:18 +02:00
Aleksander Machniak
6d5a1b9e8f
Get rid of some rcube_config::all() calls
2014-06-28 10:07:44 +02:00
Aleksander Machniak
c5f06896d4
Display full quota information in popup ( #1485769 , #1486604 )
2014-06-26 12:32:52 +02:00