1c0cd61fff
Add texts for password recovery to all languages
7 years ago
ab666b6b7f
Fix microtime() usage
...
By default, microtime() returns a string :-/ which unsurprisingly causes
a warning when doing math on it.
7 years ago
8fb67e6fbf
Fix broken table names caused by doubled table_by_key() calls
...
The high-level db_*() functions (like db_update(), and also
_db_add_field() in upgrade.php) call table_by_key() internally, which
also means the unwrangled table name needs to be handed over to them.
If handing over an already table_by_key()'d table name, it gets modified
again and results in something like prefix_prefix_mailbox.
7 years ago
a27f80c01d
Merge pull request #113 from er1cs/patch-2
...
Update upgrade.php
7 years ago
24b447f8e5
Merge pull request #112 from er1cs/patch-1
...
Update functions.inc.php
7 years ago
a4467a7e0b
Update upgrade.php
7 years ago
7b8626ca81
Update functions.inc.php
...
I found that Mysql 8 don't like table names without `` in requests. So i make changes in function table_by_key in functions.inc.php and in upgrade.php . Now it works. FreeBSD 11.1 Apache/2.4.29 (FreeBSD) PHP/7.1.11 Mysql 8
7 years ago
e478eb8b9f
Merge pull request #110 from Erwane/syslog-ident
...
#109 : syslog ident set to "vacation"
7 years ago
37d4279c52
syslog ident set to "vacation"
7 years ago
43fb0bde77
log IP address for failed logins as well - see #105
7 years ago
b06d25de8f
Merge pull request #108 from HLFH/master
...
favicon within images folder
7 years ago
0972df8243
favicon within images folder
7 years ago
768d29623e
patch from https://github.com/bofh16/postfixadmin/blob/master/bg.lang.patch - thanks!
7 years ago
7afb26fcc8
variables for docker
7 years ago
bdade520f4
Merge pull request #85 from julywind/master
...
fix invalid value for token_validity
7 years ago
5f1ac12d72
use current time as default token_validity value
7 years ago
8bd435039b
Merge pull request #92 from leeclemens/feature-91/mysql-ssl
...
Add support for MySQL connections over SSL
7 years ago
ebbd9025e4
Add support for MySQL connections over SSL
7 years ago
dbbc40b327
add example docker compose settings
7 years ago
ba47f2df2a
update docker entrypoint - require db connection params; default to sqlite; revert to using upgrade.php as we do not need the setup.php checks
7 years ago
72f32f0b3d
Merge pull request #90 from pbkwee/patch-1
...
singular correction. Update en.lang
7 years ago
f217524524
Update en.lang
...
"Your email address or password are not correct". Message indicates one thing is wrong. So use is not are.
7 years ago
5720e73732
+ cd docker
7 years ago
a77d08a92c
initial Docker readme
7 years ago
699267a915
fall back to sqlite for docker image
7 years ago
356ca84144
Merge pull request #64 from J0WI/docker
...
[WIP] add Dockerfile
7 years ago
0f09b8c176
_db_add_field() calls table_by_key - so avoid calling it twice ...
7 years ago
17e347de7f
Add id autoincrement field to log table; ought to fix #89
7 years ago
90d3a0ded7
see #86 - remove unnecessary config user/group
7 years ago
56e1215994
upgrade.php: output current/target version
7 years ago
4670182d79
fix invalid value for token_validity
7 years ago
fe5e256b6d
Merge pull request #79 from Ecodev/harden-password-reset
...
Harden password reset process
7 years ago
ffb84283c2
Harden password reset process
...
The improvements are:
- Die with an explicit message when a user is trying to reset his lost password and the option is disabled in config
- Redirect user to main page after password change using relative URL
- Don't leak info whether user exists or has recovery info defined
- Throttle password reset requests to prevent brute force attacks
- Show phone/alt email fields in mailbox/admin edit form only when the password reset option is enabled
- Make database upgrade code compatible with other databases types
- Use the existing password generator to generate OTP. It is now stored in database, unique to each user, valid only for 1 hour and can only by used once.
7 years ago
8bb6000072
Merge pull request #60 from Vilican/master
...
Security fixes
7 years ago
db06ac919c
Merge pull request #82 from evaryont/sqlite-v1837
...
Upgrade SQlite db to v1837
7 years ago
f568309ef5
Upgrade SQlite db to v1837
...
Includes a TODO for v1836. Not sure if it's needed... Haven't ran into
any issues yet.
7 years ago
39dca79879
Add SQLite and PDO support
7 years ago
c5136c408d
improve config file loading when installed from a debian package
7 years ago
ec2cc0041e
fix postgres dependency
7 years ago
ae56c2b700
Fix syntax error in viewlog.php
...
Reported in issue #74
7 years ago
dd06aa75e0
attempt at fixing various .deb issues - link templates_c to /var/cache/postfixadmin; add postfixadmin-cli to deb and symlink into /usr/bin
7 years ago
252d42dcc0
fix perms (executable)
7 years ago
5c2e3d1e00
possible changes for deb package to include postfixadmin-cli in /usr/bin
7 years ago
6258cc669d
update quilt patches
7 years ago
2fc36e82ad
see #74 - fix undefined $CONF[page_size]
7 years ago
4b999b3f6b
improve mysqli connection settings - see https://github.com/postfixadmin/postfixadmin/issues/73
7 years ago
3c95ec4a09
Add CSRF token
7 years ago
9f30aa5ff4
Handle logout in a new way (user login)
7 years ago
74c29f8a10
Handle logout in a new way (admin login)
7 years ago
82e7bdfda3
fix surname typo
7 years ago
Christian Boltz