40fe66b71e
Fix reference to non-existing blank.tif file in mime_content_type check
8 years ago
638afafbd2
Make so rcmail.log() depends on devel_mode ( #5193 )
8 years ago
650ac8befb
Fix displaying size of attachments with zero size
8 years ago
daeb66ee99
Fix login form
...
Fix a small bug introduced on commit 43f3c5f
8 years ago
32e5a6bbcf
Fix bug where folder creation could fail if personal namespace contained more than one entry ( #5403 )
...
+ small code improvements
8 years ago
873e0353cf
Use smart-upload-button for messages and contact photos upload
...
Unified interface with rcmail::upload_form().
8 years ago
43f3c5fb2a
Implement "one click" attachment upload ( #5024 )
8 years ago
9debc38724
Drop mail_header_delimiter option, since we don't use mail() we don't need it
8 years ago
184de7735c
CS fixes (mostly phpdoc)
8 years ago
ebc2f5dc7d
Add possibility to rename attachments in mail compose ( #4996 )
...
... and fix some small issues related to the new compose attachment menu feature
8 years ago
8a13615e9e
Add possibility to preview and download attachments in mail compose ( #5053 )
8 years ago
e1165fed89
Remove backward compatibility "layer" of bc.php ( #4902 ) - now for real
8 years ago
4361a95820
Fix missing localization of HTML editor when assets_dir != INSTALL_PATH
8 years ago
9e64dc2deb
Remove application/x-tar file extension test as it might not exist in nginx config ( #5253 )
...
Use text/css instead
8 years ago
9634169647
Bump version number to 1.3-beta
9 years ago
a0f38f5fd8
Small code style improvements
9 years ago
4e6f3019f5
Enigma: Handle encrypted/signed content inside message/rfc822 attachments
9 years ago
3a13b5dab8
CS fixes
9 years ago
0c9e55b0c9
Fix PHP warning when defaults.inc.php is not readable
9 years ago
4a408843b0
Protect download urls against CSRF using unique request tokens ( #1490642 )
...
Send X-Frame-Options headers with every HTTP response
9 years ago
10e5192a2b
Fix path traversal vulnerability in setting a skin ( #1490620 )
9 years ago
69a1e4f7b1
rcube_parse_host() -> rcube_utils::parse_host()
9 years ago
7476410a04
Add missing deprecation warning
9 years ago
458a6b26e8
Load bc.inc in script startup
9 years ago
32695c333c
Restore bc.inc which now logs a warning when calling deprecated functions
9 years ago
a15d877ba8
Added brute-force attack prevention via login rate limit ( #1490566 )
9 years ago
454b0b1ca9
Remove deprecated rcmail and rcube_imap methods
9 years ago
2aa9ee56fd
Fix so disabling emoticons plugin really removes emoticons button from HTML editor
9 years ago
234fd19505
Replace deprecated call to Q within array_map()
9 years ago
74ce01efc7
Q() -> rcube::Q()
9 years ago
a5c03db798
Security: Added options to validate username/password on logon ( #1490500 )
9 years ago
c1bbf0d0b6
After failed login wait a second to slow down brute-force attacks ( #1490549 )
9 years ago
fddfd8e6d7
Remove backward compatibility "layer" of bc.php ( #1490534 )
9 years ago
df0b4f3437
Make sure an email address is valid when replacing it with mailto: link
9 years ago
26086981a2
Improve randomness of security tokens ( #1490529 )
9 years ago
e2f605d44d
Fallback to C locale
9 years ago
3c29c7e858
Fix various issues with Turkish (and similar) locales ( #1490519 )
9 years ago
c4daf3f14f
Fix regression in converting signatures to text, fixed PHP warning in html2text() call
9 years ago
a63f14ec40
Emoticons-related code refactoring
...
- Emoticons: All emoticons-related functionality is handled by the plugin now
- Emoticons: Added option to switch on/off emoticons in compose editor (#1485732 )
- Emoticons: Added option to switch on/off emoticons in plain text messages
- Plugin API: Added disabled_plugins an disabled_buttons options in html_editor hook
- Plugin API: Added html2text hook
9 years ago
1b39d9a6c7
PHP7: Fixed some E_WARNING errors that previously were E_STRICT
9 years ago
93e64008a6
Small code improvements
9 years ago
08bb20f261
Don't use deprecated functions/constants (from bc.inc)
9 years ago
9d78c68cbf
Fix so imap folder attribute comparisons are case-insensitive ( #1490466 )
...
+ make in_array_nocase() much faster for ASCII strings
9 years ago
252cc4c4ac
Password: Allow temporarily disabling the plugin functionality with a notice
9 years ago
8447bae77c
Require Mbstring and OpenSSL extensions ( #1490415 ) - remove redundant code
9 years ago
a958748947
CS fixes
9 years ago
b782815dac
Fix XSS vulnerability in _mbox argument handling ( #1490417 )
9 years ago
8042e13af6
Add --config and --type options to moduserprefs.sh script ( #1490051 )
9 years ago
3994b3a26c
Installer: Use openssl_random_pseudo_bytes() (if available) to generate des_key ( #1490402 )
9 years ago
0c08b04778
Fix issues when using moduserprefs.sh without --user argument ( #1490399 )
9 years ago
Aleksander Machniak