Christian Boltz
bf9ec09829
Merge pull request #23 from Janfred/bugfix_aliasdelete
...
Security fix: don't allow to delete protected aliases (CVE-2017-5930)
9 years ago
Jan-Frederik Rieckers
800f07816a
Fix wrong way of check for can_delete
9 years ago
Jan-Frederik Rieckers
03f4bad49c
Add Language-Key for protected_alias_cant_be_deleted
9 years ago
Jan-Frederik Rieckers
7bb36d0bbc
Fix security hole in AliasHandler
...
Without this fix it is possible to delete a protected alias via editing
the request parameter of the alias to delete.
9 years ago
David Goodwin
e56727fe09
Merge remote-tracking branch 'svnexport/master'
9 years ago
Christian Boltz
e3ade3e4b2
Set alias domain-related smarty variables only if alias domains are enabled
...
This avoids "undefined variable" warnings.
Reported by Kalavera on IRC.
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1888 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
061a96fea3
Merge remote-tracking branch 'svnexport/master'
9 years ago
David Goodwin
2bbf6c63d4
see https://sourceforge.net/p/postfixadmin/bugs/376/ - remove any old templates_c/ files
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1887 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
b8051515db
check whether we can use templates_c (this seems a better idea than falling back to using something in /tmp)
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1886 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
b434f7070a
possibly improve debian dependencies
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1885 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
491df198cc
Merge remote-tracking branch 'svnexport/master'
9 years ago
David Goodwin
2f2db5949a
fix date formatting in non-english languages, thanks to uz@musoftware.de
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1884 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
bd8e0e3ae3
apparently dead columns - thanks to uz@musoftware.de
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1883 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
9ba7118d7b
AliasHandler: restrict mailbox subquery to requested domains
...
set_is_mailbox_extrafrom() restricts the domain list to the domain that
needs to be checked (in normal list-virtual listing one domain), and is
then used to restore the default extrafrom.
This improves the performance for most usecases even for superadmins.
Note: Search mode might still be slow because by default it searches in
all domains available to the admin.
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1882 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
516f1c68f4
upgrade_1835_mysql: fix defaults for both date fields at once
...
Doing it in two steps fails, see comment by Gabor 'Morc' KORMOS on
https://sourceforge.net/p/postfixadmin/bugs/5/
Note: This is an exception from the "never change an existing
upgrade_*() function" rule because
a) the result doesn't change for people where it worked and
b) it will continue here anyway for people who had upgrade problems
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1881 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
74130b478c
list-virtual.tpl: add missing "download as CSV" for mailboxes
...
Reported by Dan <dannyro @SF> in
https://sourceforge.net/p/postfixadmin/patches/135/
Note that I'm using a completely different patch to fix it.
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1880 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
40b4fdf61c
beautify alias list search parameters
...
AliasHandler:
- initStruct(): handle __mailbox_username as separate field (needed to
make it searchable)
- split off a condition_ignore_mailboxes() function (used in getList()
and getPagebrowser()) to add '__mailbox_username IS NULL' to the search
condition array. Also, make sure $condition can be an array (preferred)
or a string with a raw query
list-virtual.php:
- hand over a search array instead of a raw query
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1879 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
16e1407621
db_where_clause(): allow NULL and NOTNULL searchmodes
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1878 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
bd28fcb194
AliasHandler: restrict __is_mailbox subquery to allowed domains
...
This improves performance on setups with lots of mailboxes.
Well, except for superadmins because restricting to "all domains"
doesn't really help ;-)
Thanks to gygy for reporting this on IRC, and for testing the patch.
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1877 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
4c2ff84d52
upate wiki links
...
mediawiki -> SF wiki
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1876 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
bbec3e9f0e
pacrypt(): allow switching between dovecot:* password schemes
...
Dovecot password hashes include a {SCHEME} prefix, so it's possible to
switch the scheme while still accepting passwords hashed using the
previous dovecot:* scheme.
This patch adds the code needed to find out the used hashing scheme
from the hash and ensures it gets used to validate the password.
Patch by Aaron Lindsay <aaron AT aclindsay com> (sent to the ML)
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1875 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
17d1cce041
Merge remote-tracking branch 'svnexport/master'
9 years ago
Christian Boltz
62b872491f
config.inc.php: add pointers between $CONF[encrypt] = 'authlib' and $CONF[authlib_default_flavor]
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1874 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
c909d4a71e
FetchmailHandler: use a valid date as default for 'date'
...
This fixes an invalid query when using mysql strict mode.
Reported by Martin Kenney, https://sourceforge.net/p/postfixadmin/bugs/380/
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1873 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
f77309fd62
try and improve debian dependencies - see https://sourceforge.net/p/postfixadmin/bugs/382/
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1872 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
cade17f777
update CHANGELOG.TXT:
...
- add section about 3.0.1 Debian packages
- import 2.3.8 CHANGELOG section from 2.3 branch
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1871 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
6e6da819d1
Merge remote-tracking branch 'svnexport/master'
9 years ago
David Goodwin
b44459c016
sigh....
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1868 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
fbd4b5ebe9
bump debian/changelog
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1866 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
35ce6a61e6
add configs/ directory to debian packages - is used by smarty
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1865 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
124354aa19
fix missing smarty/ dir - see https://sourceforge.net/p/postfixadmin/discussion/676076/thread/00134b8a
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1864 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
ef6a1ecdbb
Merge remote-tracking branch 'svnexport/master'
...
Postfixadmin v3.0
9 years ago
Christian Boltz
6eda18fcde
prepare PostfixAdmin 3.0 release
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1861 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
3a21583f3a
Merge remote-tracking branch 'svnexport/master'
9 years ago
Christian Boltz
f210a3346c
update CHANGELOG.TXT to include changes up to r1859
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1860 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
2a680d22c6
Add Romanian translation
...
Thanks to Dan <dannyro @SF> for providing this new translation!
https://sourceforge.net/p/postfixadmin/patches/132/
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1859 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
b2504c70f7
Merge remote-tracking branch 'svnexport/master'
9 years ago
Christian Boltz
2a6247a6d9
db_connect(): drop unused variable $succes(s)
...
One of the variable names had a typo [1], and since those variables are
unused, the best way is to drop them.
[1] reported by tfarina, https://github.com/postfixadmin/postfixadmin/issues/15
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1858 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
Christian Boltz
054d0a4c0e
vacation.pl: mime-decode original subject
...
Reported by czbg, https://sourceforge.net/p/postfixadmin/bugs/366/
Note that the original subject will keep the encoding specified in the
mime header (for example iso-8859-15) while we assume it to be utf8
(see "%mail =...").
Nevertheless, a broken character still looks better than having
=?ISO-8858-1?Q?Gr=DFe?= in the subject ;-)
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1857 a1433add-5e2c-0410-b055-b7f2511e0802
9 years ago
David Goodwin
483bb83edc
see #377 - looks like the pg+mysql check is partly the wrong way around - mysql only has ints....
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1856 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago
David Goodwin
3d28caf759
change error message depending on whether templates_c is present or not
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1855 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago
David Goodwin
1bdf85b728
Merge remote-tracking branch 'svnexport/master'
10 years ago
David Goodwin
b6453c8d1e
try and improve dependencies; mention sqlite and allow eg mariadb
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1854 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago
Christian Boltz
13cdd50d0a
Add checks to login.php and cli to ensure database layout is up to date
...
- add check_db_version() to functions.inc.php
- add $min_db_version (needs to be updated at least before the release)
- call check_db_version in login.php, users/login.php and CLI - they'll
error out if the database layout is outdated
- change setup.php to use check_db_version()
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1853 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago
David Goodwin
1fc6f3b03e
update patches - they appear to now apply...
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1852 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago
David Goodwin
a3b19ed23e
update debian/README.txt to include debian/rules prep step
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1851 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago
David Goodwin
f780176070
add in prep rule for make so we have a .tar.gz to trick dpkg-buildpackage with...
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1850 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago
David Goodwin
bc5917c0ef
drop admin directory; no longer required
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1849 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago
David Goodwin
cf47c8c5de
Merge in Debian's /debian so we also support Apache 2.4 and PHP7 in our debs.... see: http://http.debian.net/debian/pool/main/p/postfixadmin/postfixadmin_2.3.7-2.debian.tar.xz and https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=821643
...
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1848 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago
Christian Boltz
386f37dfdb
Don't decode b64p (base64-encoded password) fields.
...
This is not supported in MySQL < 5.6.
Besides that, we don't display the content of b64p fields anywhere, so
the easiest way is not to decode it.
Note: Currently, the only user of b64p is FetchmailHandler.
Fixes https://sourceforge.net/p/postfixadmin/bugs/357/
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@1847 a1433add-5e2c-0410-b055-b7f2511e0802
10 years ago