Commit Graph

58 Commits

Author SHA1 Message Date
Aleksander Machniak
4e0532808d Fix bug where it wasn't possible to store more that 2MB objects in memcache/apc (#5452)
Added memcache_max_allowed_packet and apc_max_allowed_packet settings
2016-10-16 11:19:30 +02:00
Aleksander Machniak
195dc11855 Support host-specific imap_conn_options/smtp_conn_options/managesieve_conn_options (#5136) 2016-09-30 18:02:23 +02:00
Aleksander Machniak
dcabc1d814 Merge remote-tracking branch 'upstream/master'
Conflicts:
	tests/Framework/Washtml.php
2016-07-31 09:26:19 +02:00
Aleksander Machniak
c3fc072d97 Remove code related to magic_quotes_* and register_globals
...they do not exist in PHP 5.4 which we now require.
2016-07-29 13:34:50 +02:00
Aleksander Machniak
906cf101c3 Better time handling in rcube_utils::clean_datestr() 2016-07-29 12:40:15 +02:00
Aleksander Machniak
ec1525a1e6 Remove debug code 2016-07-29 12:26:23 +02:00
Aleksander Machniak
ed35267b9b Managesieve: Fix parsing of vacation date-time with non-default date_format (#5372)
Added new method rcube_utils::format_datestr() to convert date_format date
into ISO date format.
2016-07-29 05:42:18 -04:00
Aleksander Machniak
f2eafda539 Fix bug where microsecond format in logged date didn't work in some cases 2016-06-12 09:16:54 +02:00
Aleksander Machniak
d61d33a12a Fix handling of --delete argument in moduserprefs.sh script (#5296) 2016-06-01 20:15:22 +02:00
Aleksander Machniak
6737e293bb Wash position:fixed style in HTML mail for better security (#5264) 2016-05-29 17:09:41 +02:00
Aleksander Machniak
cbe701ac4a Fix rcube_utils::words_match() to work with mixed/invalid/binary content (T844) 2015-11-18 13:27:00 +01:00
Aleksander Machniak
7e3298753a Use ternary operator where aplicable 2015-11-14 10:08:07 +01:00
Aleksander Machniak
a03233ceba CS fixes 2015-10-07 09:14:18 +02:00
Aleksander Machniak
b2b9b591ce Fix handling random_bytes() errors in PHP 7.0.0RC3 2015-09-18 20:17:07 +02:00
Aleksander Machniak
e85bbc9e9c random_bytes() can throw an exception in some cases, since PHP 7.0.0rc3 2015-09-10 16:57:12 +02:00
Aleksander Machniak
26086981a2 Improve randomness of security tokens (#1490529) 2015-09-08 17:38:19 +02:00
Aleksander Machniak
f00e1f5333 CS fixes 2015-08-25 11:16:39 +02:00
Aleksander Machniak
7a42173a16 Simplify rcube_utils::check_ip() 2015-08-13 09:04:19 +02:00
Aleksander Machniak
6b31846c43 Fix IPv6 address validation on PHP with disabled IPv6 support 2015-08-12 21:11:20 +02:00
Aleksander Machniak
93e64008a6 Small code improvements 2015-08-05 09:30:51 +02:00
Aleksander Machniak
8447bae77c Require Mbstring and OpenSSL extensions (#1490415) - remove redundant code 2015-06-28 12:27:48 +02:00
Aleksander Machniak
9aae1b7fc3 Fix so microseconds macro (u) in log_date_format works (#1490446) 2015-06-26 09:20:43 +02:00
Aleksander Machniak
a958748947 CS fixes 2015-06-07 15:26:33 +02:00
Aleksander Machniak
3994b3a26c Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key (#1490402) 2015-05-23 09:42:11 +02:00
Thomas Bruederli
c32998084d Add untility function to match strings ignoring word order 2015-03-03 14:54:36 +01:00
Thomas Bruederli
e8b82c2e7b Fix rcube_utils::normalize_string() to support unicode characters + add argument for minimum token length 2014-12-28 16:22:08 +01:00
Thomas Bruederli
09c58d1add Make rcube_utils::strtotime() timezone aware (#1490163) 2014-12-28 15:41:47 +01:00
Aleksander Machniak
787a421846 Fix rcube_utils::anytodatetime() with no timezone specified 2014-11-22 11:39:19 -05:00
Aleksander Machniak
848e204ef9 Fix validation of email addresses with IDNA domains (#1490067) 2014-09-13 12:36:54 +02:00
Aleksander Machniak
29c24e647c Get rid of DIRECTORY_SEPARATOR for consistency 2014-08-28 19:24:03 +02:00
Aleksander Machniak
5f58127eae Added rcube_utils::resolve_url() 2014-08-24 11:43:12 +02:00
Aleksander Machniak
75bbada03b Remove code for PHP<5.3, use PHP_VERSION_ID instead of version_compare() for version checks 2014-08-24 11:23:33 +02:00
Thomas Bruederli
cc850263d4 Add optional timezone argument for date conversion 2014-07-31 14:29:14 +02:00
Aleksander Machniak
49dad5f669 Fix broken normalize_string(), add support for ISO-8859-2 2014-05-27 11:39:31 +02:00
Felix Eckhofer
30e6b980a6 Remove usage of $RCMAIL global variable 2014-03-26 20:45:33 +01:00
Felix Eckhofer
ef721fc430 Add config variable 'proxy_whitelist'
HTTP headers X_FORWARDED_* and X_REAL_IP are only evaluated when
received from an IP listed in proxy_whitelist. Furthermore, only the
last non-trusted IP from X-Forwarded-For is used in place of the real
ip.

Without this, an attacker can easily spoof the headers and control the
result of the ip or ssl check.

This fixes several problems with [3a4c9f42], [4d480b36] and [a520f331] as
mentioned in #1489729.
2014-03-26 20:44:16 +01:00
Aleksander Machniak
517c9f9a8d Fix directories check in Installer on Windows (#1489576)
Added rcube_utils::is_absolute_path() method
2014-02-07 14:43:51 +01:00
Aleksander Machniak
f6d23a8dce Fix PHP warning when 1st argument of parse_host() is not a string (#1489486) 2013-12-20 17:41:10 +01:00
Aleksander Machniak
a520f331c1 Fix handling of X-Forwarded-For header with multiple addresses (#1489481) 2013-12-17 09:21:05 +01:00
Aleksander Machniak
d19c0f9f30 In normalize_string() replace 4-byte unicode characters with '?' character.
These are not supported in default utf-8 charset on mysql,
the chance we'd need them in searching is very low.
2013-12-12 08:58:54 +01:00
Aleksander Machniak
b1f3c3bee8 Fixed saving contact birthday/anniversary dates before 01-01-1970 2013-10-28 15:28:58 +01:00
Thomas Bruederli
fdb30f3279 Fix CSS selector modifications when nested in @media blocks 2013-10-26 11:49:02 +02:00
Aleksander Machniak
ff6de99ae4 Some micro-optimizations 2013-10-13 16:12:43 +02:00
Aleksander Machniak
d1abd8e339 Fix infinite loop in rcube_utils::mod_css_styles() after recent changes in rcube_string_replacer 2013-10-12 12:28:40 +02:00
Aleksander Machniak
af79a7b837 Fixed issues where HTML comments inside style tag would hang Internet Explorer 2013-10-04 09:40:37 +02:00
Aleksander Machniak
eafd5b1aa4 Improved mailto: link arguments handling (#1489363) 2013-10-03 17:36:31 +02:00
Thomas Bruederli
52830ea605 Improve handling of date strings and DateTime values in contacts 2013-09-10 23:37:10 +02:00
Aleksander Machniak
b32fab16ef Fix handling of non-default date formats (#1489294)
- remove ambiguous m/d/Y format from default config
2013-08-24 18:08:54 +02:00
Thomas Bruederli
4d480b36ea Respect HTTP_X_FORWARDED_FOR and HTTP_X_REAL_IP variables for session IP check 2013-07-17 08:04:15 +02:00
Aleksander Machniak
39b905b7a8 Canonize boolean ini_get() results (#1489189) 2013-06-20 15:08:10 +02:00