Aleksander Machniak
e17fcf1649
Support ALLOW-FROM in x_frame_options ( #5122 )
9 years ago
Aleksander Machniak
d02e6ea45e
Fix so templating system does not mess with external (e.g. email) content ( #5499 )
9 years ago
Aleksander Machniak
ecfe177173
CS fixes, use $this instead of local variable
9 years ago
Aleksander Machniak
e3b61cd487
Plugin API: Added get_compose_responses hook ( #5457 )
9 years ago
Aleksander Machniak
edea8732a6
Fix regression where UI object could be not created on some pages ( #5484 )
9 years ago
Aleksander Machniak
571a10751f
Display error when trying to upload more files than specified in max_file_uploads ( #5483 )
9 years ago
Aleksander Machniak
f43f5bf93f
Use JSON_PRETTY_PRINT in devel_mode
...
This effectively makes PHP 5.4 a real requirement
9 years ago
Aleksander Machniak
4e0532808d
Fix bug where it wasn't possible to store more that 2MB objects in memcache/apc ( #5452 )
...
Added memcache_max_allowed_packet and apc_max_allowed_packet settings
9 years ago
Aleksander Machniak
40fe66b71e
Fix reference to non-existing blank.tif file in mime_content_type check
9 years ago
Aleksander Machniak
638afafbd2
Make so rcmail.log() depends on devel_mode ( #5193 )
9 years ago
Aleksander Machniak
650ac8befb
Fix displaying size of attachments with zero size
9 years ago
Victor Benincasa
daeb66ee99
Fix login form
...
Fix a small bug introduced on commit 43f3c5f that breaks the login form ($attrib['form'] is checked at line 1899, so it cannot be unset).
9 years ago
Aleksander Machniak
32e5a6bbcf
Fix bug where folder creation could fail if personal namespace contained more than one entry ( #5403 )
...
+ small code improvements
9 years ago
Aleksander Machniak
873e0353cf
Use smart-upload-button for messages and contact photos upload
...
Unified interface with rcmail::upload_form().
9 years ago
Aleksander Machniak
43f3c5fb2a
Implement "one click" attachment upload ( #5024 )
9 years ago
Aleksander Machniak
9debc38724
Drop mail_header_delimiter option, since we don't use mail() we don't need it
9 years ago
Aleksander Machniak
184de7735c
CS fixes (mostly phpdoc)
9 years ago
Aleksander Machniak
ebc2f5dc7d
Add possibility to rename attachments in mail compose ( #4996 )
...
... and fix some small issues related to the new compose attachment menu feature
10 years ago
Aleksander Machniak
8a13615e9e
Add possibility to preview and download attachments in mail compose ( #5053 )
10 years ago
Aleksander Machniak
e1165fed89
Remove backward compatibility "layer" of bc.php ( #4902 ) - now for real
10 years ago
Aleksander Machniak
4361a95820
Fix missing localization of HTML editor when assets_dir != INSTALL_PATH
10 years ago
Aleksander Machniak
9e64dc2deb
Remove application/x-tar file extension test as it might not exist in nginx config ( #5253 )
...
Use text/css instead
10 years ago
Aleksander Machniak
9634169647
Bump version number to 1.3-beta
10 years ago
Aleksander Machniak
a0f38f5fd8
Small code style improvements
10 years ago
Aleksander Machniak
4e6f3019f5
Enigma: Handle encrypted/signed content inside message/rfc822 attachments
10 years ago
Aleksander Machniak
3a13b5dab8
CS fixes
10 years ago
Aleksander Machniak
0c9e55b0c9
Fix PHP warning when defaults.inc.php is not readable
10 years ago
Thomas Bruederli
4a408843b0
Protect download urls against CSRF using unique request tokens ( #1490642 )
...
Send X-Frame-Options headers with every HTTP response
10 years ago
Aleksander Machniak
10e5192a2b
Fix path traversal vulnerability in setting a skin ( #1490620 )
10 years ago
Aleksander Machniak
69a1e4f7b1
rcube_parse_host() -> rcube_utils::parse_host()
10 years ago
Aleksander Machniak
7476410a04
Add missing deprecation warning
10 years ago
Thomas Bruederli
458a6b26e8
Load bc.inc in script startup
10 years ago
Thomas Bruederli
32695c333c
Restore bc.inc which now logs a warning when calling deprecated functions
10 years ago
Aleksander Machniak
a15d877ba8
Added brute-force attack prevention via login rate limit ( #1490566 )
10 years ago
Aleksander Machniak
454b0b1ca9
Remove deprecated rcmail and rcube_imap methods
10 years ago
Aleksander Machniak
2aa9ee56fd
Fix so disabling emoticons plugin really removes emoticons button from HTML editor
10 years ago
dsoares
234fd19505
Replace deprecated call to Q within array_map()
10 years ago
Aleksander Machniak
74ce01efc7
Q() -> rcube::Q()
10 years ago
Aleksander Machniak
a5c03db798
Security: Added options to validate username/password on logon ( #1490500 )
10 years ago
Aleksander Machniak
c1bbf0d0b6
After failed login wait a second to slow down brute-force attacks ( #1490549 )
10 years ago
Aleksander Machniak
fddfd8e6d7
Remove backward compatibility "layer" of bc.php ( #1490534 )
10 years ago
Aleksander Machniak
df0b4f3437
Make sure an email address is valid when replacing it with mailto: link
10 years ago
Aleksander Machniak
26086981a2
Improve randomness of security tokens ( #1490529 )
10 years ago
Aleksander Machniak
e2f605d44d
Fallback to C locale
10 years ago
Aleksander Machniak
3c29c7e858
Fix various issues with Turkish (and similar) locales ( #1490519 )
10 years ago
Aleksander Machniak
c4daf3f14f
Fix regression in converting signatures to text, fixed PHP warning in html2text() call
10 years ago
Aleksander Machniak
a63f14ec40
Emoticons-related code refactoring
...
- Emoticons: All emoticons-related functionality is handled by the plugin now
- Emoticons: Added option to switch on/off emoticons in compose editor (#1485732 )
- Emoticons: Added option to switch on/off emoticons in plain text messages
- Plugin API: Added disabled_plugins an disabled_buttons options in html_editor hook
- Plugin API: Added html2text hook
10 years ago
Aleksander Machniak
1b39d9a6c7
PHP7: Fixed some E_WARNING errors that previously were E_STRICT
11 years ago
Aleksander Machniak
93e64008a6
Small code improvements
11 years ago
Aleksander Machniak
08bb20f261
Don't use deprecated functions/constants (from bc.inc)
11 years ago