| 1 | ************************************* |
| 2 | *** SquirrelMail Devel Series 1.5 *** |
| 3 | ************************************* |
| 4 | |
| 5 | Version 1.5.2 - CVS |
| 6 | ------------------- |
| 7 | - Fix warning about array required in array_keys for display options when no |
| 8 | fontset is defined. |
| 9 | - Added "bad plugin" blacklist in configtest.php. |
| 10 | - Fix MagicHTML fix with respect to parsing of u\rl in IE. |
| 11 | - Added monitored folders option to newmail plugin. |
| 12 | - Tweaked STARTTLS option for SMTP/IMAP to allow previous settings of just |
| 13 | pure TLS not to be used to assume STARTTLS. |
| 14 | - Fixed quotes in configuration strings in administrator plugin. |
| 15 | - Fixed View as HTML link so it doesn't forget it was part of a seach result. |
| 16 | - Don't use delimiter in IMAP subscription command, when noselect folder is |
| 17 | created. |
| 18 | - Security: Possible cookie theft in src/redirect.php if |
| 19 | register_globals is enabled, and malicous site is running |
| 20 | in same domain. |
| 21 | - Stop URL parsing, if 8bit symbols or HTML entities are detected (#1356798). |
| 22 | - Added new color themes by Jeremy Landes, Tammi Maggard and Lucas Austin-Howe |
| 23 | (#1378332), (#1377567), (#1377529), (#1377528), (#1377527), (#1377526), |
| 24 | (#1377525), (#1393188). |
| 25 | - Issue loading options page always loaded the prefs |
| 26 | initial_value on display, instead of the users' value. |
| 27 | - Adding the message_body hook to src/view_html.php and src/view_text.php, |
| 28 | allowing display of unsafe images when viewing HTML attachments and when |
| 29 | HTML is in an <iframe>. |
| 30 | - Fixed from address in case of MDN receipts (patch from Dimitar Pashev) |
| 31 | - Advanced tree folder listing is moved to templates. $advanced_tree |
| 32 | configuration variable is removed. |
| 33 | - Added system locale tests to configtest.php script. |
| 34 | - Fixed invalid HTML output that caused error notices in compose.php (#1454409). |
| 35 | - Introduction of centralised initialization file init.php. Location of some |
| 36 | scripts is changed. If code tries to use older script layout, scripts will |
| 37 | break and display error messages. |
| 38 | - Added session regenrate id functionality to prohibit session hijacking. |
| 39 | - Fixed sqsession_cookie function for setting HttpOnly cookie attribute. |
| 40 | - Reduce references header in a smart way to avoid "header too long" |
| 41 | errors from SMTP servers in really long threads (#1167754, #1465342). |
| 42 | - Added code that allows to use internal password functions in sqimap_login(). |
| 43 | Switched plugins to use this code instead of accessing key and otp information |
| 44 | directly. |
| 45 | - Fixed automatic mailbox creation in left_main.php. 1.5.1 mailbox caching |
| 46 | broke detection of unsubscribed special folders (#1461578). |
| 47 | - Undo extra sanitizing in decodeHeader() function (#1460638). |
| 48 | - Added workaround for broken OpenBSD 3.8+ setlocale() function (#1427512). |
| 49 | - Fixed session lockups on large attachment downloads. |
| 50 | - Added configtest hook in src/configtest.php. |
| 51 | - Improved error handling for the help pages. |
| 52 | - Fixed possibility to use single quote in provider name (#1475744). |
| 53 | - Improve recovery when EHLO not supported on legacy SMTP servers |
| 54 | (#1031455). |
| 55 | - Added error handling and $onlylocal argument to abook_init hook. |
| 56 | - Added PHP 5.1.0 date_default_timezone_set() function support. Allows |
| 57 | to use time zone settings in PHP safe_mode. |
| 58 | - Sanitized IMAP folder names in error_message() function and filters plugin. |
| 59 | - Take X-Forwarded-Host HTTP header in consideration when constructing |
| 60 | base_uri for redirects; reduces problems with transparent proxies |
| 61 | (#1488590). |
| 62 | - Fixed server capability retrieval for "double" cases in capability |
| 63 | response, like "FOO FOO=bar". |
| 64 | - Various address book database backend modifications. Fixed invalid |
| 65 | error checks in insert() and delete() methods (checks caused PHP |
| 66 | warnings). Turned on Pear DB field case portability mode. Escaped SQL |
| 67 | wildcards in search() method. Handle nickname changes in modify() |
| 68 | method when new nickname is already in use. Made search expressions |
| 69 | case insensitive in search() method. |
| 70 | - Added special folder (Drafts, Sent, Trash) translations in mailbox |
| 71 | tree and folder selection boxes. |
| 72 | - Added write support to address book LDAP backend. Patch by David |
| 73 | Hardeman (#1495763). |
| 74 | - Added message copy options. |
| 75 | - Removed html formating from address book backend classes. Added |
| 76 | fullname() method to addressbook_backend class. Moved |
| 77 | htmlspecialchars() sanitizing from address book backend classes to |
| 78 | html output code. If third party code displays errors from address |
| 79 | book object in html, errors must be sanitized and ASCII line feeds |
| 80 | should be converted to html line breaks. |
| 81 | - Add note to conf.pl / config_default.php to warn users that set |
| 82 | sensitive passwords in that file to properly secure it. |
| 83 | - Prevent modifications in advanced identities, when editing of |
| 84 | identities is disabled. |
| 85 | - Configuration utility does not allow 8bit symbols in IMAP folder names |
| 86 | (#1485501). |
| 87 | - Address book file backend will break with error message, if required |
| 88 | address book fields are not available. Prevents address book corruption |
| 89 | and address book format violations that can cause PHP notices. |
| 90 | - Added line length setting in local_file address book backend (#1181561). |
| 91 | - Removed proprietary wrap attribute from compose form (#1512681). |
| 92 | - Fix URL for Read Receipts being incorrect in some cases (#1177518). |
| 93 | |
| 94 | Version 1.5.1 (branched on 2006-02-12) |
| 95 | -------------------------------------- |
| 96 | - New reply citation to include date and author. |
| 97 | - Security: Fix some possible XSS bugs. |
| 98 | - Norwegian Bokmal translation uses nb_NO. |
| 99 | - Integrated Msg_Flags plugin - turn on/off icons using configuration tool, |
| 100 | menu number 11 (Tweaks), option number 3, after which users must select an |
| 101 | icon theme in Options/Display Preferences. |
| 102 | "Flag"/"Unflag" buttons are implemented as separate plugin. |
| 103 | - Added Farsi and Tagalog translation support. |
| 104 | - Enabled Ukrainian and Russian-Ukrainian support |
| 105 | - Fixed subfolders named "foo.inbox" didn't always work well. |
| 106 | - sqimap_create_stream() was not obeying passed params properly. |
| 107 | - Fix non-selectable inbox. |
| 108 | - Add src/configtest.php script which checks for common errors in the config. |
| 109 | - Improve display of some unparsable/absent dates (#891354). |
| 110 | - Add comment (Highest,Normal,Lowest) to X-Priority header. |
| 111 | Some SpamAssassin rule triggers on the absence of such a comment. |
| 112 | - Corrected moving of last message in a folder using Delete-Move-Next |
| 113 | functionality added to core in 1.5.0. |
| 114 | - Fix test for LOGINDISABLED, should only test when the auth mech actually |
| 115 | is 'login'. |
| 116 | - Update required PHP version to 4.1.0, and remove PHP 4.0.x legacy code. |
| 117 | - Make writing of preferences, abook, calendars fail better when disk full |
| 118 | (#915527). |
| 119 | - Remove code related to non-UID-supporting IMAP servers. |
| 120 | - Fix quoteimap() regex escaping problem (#921291). |
| 121 | - Added option to suppress Received: line in outbound SM headers (#847107). |
| 122 | - Changed read_body header from links to buttons (looks like message index). |
| 123 | - Add functions for building HTML forms (functions/forms.php). |
| 124 | - Moved javascript_on to session (from prefs). Centralized JavaScript |
| 125 | detection in prefs.php method checkForJavascript. |
| 126 | - Added abook_init and abook_add_class hooks. |
| 127 | - Fixed "Resume Draft" to continue using selected identities (#845290). |
| 128 | - Fixed RFC2821 incompliancy by adding a fallback mechanism to HELO if |
| 129 | EHLO is not supported. |
| 130 | - Fixed RFC2298 incompliancy by setting envelope sender to null. |
| 131 | - Fixed problem where setting all the messages on the last page of the |
| 132 | message list would return one page higher. |
| 133 | - Remove call to perform expunge on mailbox select - auto-expunge will |
| 134 | still be performed on message delete, etc. |
| 135 | - Allow single quotes to be used in theme name in conf.pl (#805309). |
| 136 | - Fixed on the fly decoding of base64 encoded attachments. |
| 137 | - Fixed message rejects by the Postfix sendmail wrapper when attachments were |
| 138 | involved. |
| 139 | - Fixed date display bug for messages of today. Show short format in case |
| 140 | of long format. (only occurs in the timeframe around 0:00 AM till |
| 141 | timezone). |
| 142 | - Added address book sorting options. Ascending/descending sorting code |
| 143 | written by Bryan Loniewski. |
| 144 | - Use Special Folder Color config option works again (#931956). |
| 145 | - In POP3-class, be more liberal regarding RFC-incompliant POP3-servers. |
| 146 | - Set up language before outputing errors in auth.php to make them appear in |
| 147 | the correct language. |
| 148 | - Added Basque translation support. |
| 149 | - Remove flag buttons / links from display if mailbox doesn't allow it. |
| 150 | - Make used of cached ordered uid list in case of server_side_sorting. |
| 151 | - Rewrite of internal mailbox sorting routines. |
| 152 | - Added sort by message size. |
| 153 | - Security: Fixed XSS vulnerability in content-type display in the attachment |
| 154 | area of read_body.php discovered by Roman Medina. |
| 155 | - Removed src/move_messages.php, move_before_move and move_messages_button_action |
| 156 | hooks. Mailbox listing actions should be handled by src/right_main.php and |
| 157 | functions/mailbox_display.php hooks. |
| 158 | - Get alternating row colors of addressbook in sync with mailbox list. |
| 159 | - Give proper error when PEAR DB not found. |
| 160 | - Remove inappropriate strip_tags() from add-to-addressbook (#968475). |
| 161 | - Prefs caching didn't work properly with register_globals off (#995102). |
| 162 | - Security: fix SQL injection vulnerability in addressbook. |
| 163 | [CVE-2004-0521] |
| 164 | - Removed html_top and html_bottom hooks. No longer used/needed. |
| 165 | - Added "trailing text" for options built by SquirrelMail (text placed |
| 166 | after text and select list inputs on options pages) |
| 167 | - Custom option page values now repopulate correctly |
| 168 | - Added "no focus" option for compose page in display preferences (setting |
| 169 | reply focus to "No focus" also affects composing new messages) |
| 170 | - Current hook name is now globally available when running a hook |
| 171 | ($currentHookName) |
| 172 | - Fix bug when Saving to Draft folder that contains special characters. |
| 173 | - Added size limit to signatures saved in file backend. Created |
| 174 | error_option_save function, that allows sending error message to options |
| 175 | page. Thanks to Martynas Bieliauskas for spotting big signature "option". |
| 176 | - Make SquirrelSpell work with safe_mode enabled, if using PHP >=4.3.0. |
| 177 | Patch by Ray Ferguson. |
| 178 | - Make IP-address in Message-ID RFC822 compliant. |
| 179 | - Uneditable address book entries no longer have checkboxes on addresses page. |
| 180 | - Alignment of title text above folder list fixed. |
| 181 | - Changed structure of xtra_code functions that are used by some translations. |
| 182 | - Added Uighur language support. |
| 183 | - Added status bar to compose window when "Compose In New Window" is used. |
| 184 | - Reenabled the move_messages_button_action hook and changed its name to |
| 185 | mailbox_display_button_action to promote the new location |
| 186 | - Making delete button, when viewing a message, consider which page was viewed |
| 187 | before. |
| 188 | - $agresive_decoding configuration option changed to $aggressive_decoding. |
| 189 | Fixed spelling. |
| 190 | - Added $lossy_encoding option (provides fix for #806698) |
| 191 | - Reenabled use of $default_charset option. Option works only with en_US |
| 192 | translation in order to prevent language/charset misconfiguration. |
| 193 | - Fixes for nonpopulation of folder lists and errors when emptying the trash |
| 194 | (provides fixes for #1019185 and #1017941) |
| 195 | - Fixed $custom_css loading in squirrelspell plugin. |
| 196 | - Turkish translation uses C character case conversion rules. Fixes PHP and |
| 197 | SquirrelMail functions are assume English conversion rules. |
| 198 | - Fixed problem that caused an error when deleting all messages on the last |
| 199 | page of a paginated view (provides fix for #1014612). |
| 200 | - Added MySQL password/UNIX crypt support to mysql backend in the |
| 201 | change_password plugin. |
| 202 | - Make SMTP Authentication detection in conf.pl more RFC-compliant. |
| 203 | - Fixed IMAP errors when using mail_fetch plugin to auto-fetch on login. |
| 204 | - Fixed folder list in Create Folders list for Courier (properly skip INBOX). |
| 205 | - Fixed undefined variables in sqimap_create_stream(). |
| 206 | - Added Bengali translation support. |
| 207 | - Fixed left frame mailbox list when sorting by case. |
| 208 | - Separated fortune plugin configuration variables from main plugin scripts. |
| 209 | See plugins/fortune/INSTALL. |
| 210 | - Fix for #906217 when checking spelling of inline replies, the corrected |
| 211 | words would appear through original email. |
| 212 | - Fixed empty information menu when viewing vCards without information |
| 213 | but name and e-mail address. |
| 214 | - User may now add an e-mail address when adding vCards without one to the |
| 215 | address book. No need to wait for the error message anymore. |
| 216 | - Removed japanese_xtra function used by older XTRA_CODE calls. Plugins |
| 217 | should use separate xtra_code functions. Older function does not provide |
| 218 | information about supported options. |
| 219 | - Added php-gettext classes (see class/l10n/*.php) and ngettext support |
| 220 | functions (provides fix for #1019007). |
| 221 | - LC_NUMERIC locale is set to C. (workaround for #1027130). Some plugins |
| 222 | might use decimal delimiters incorrectly. |
| 223 | - Added sq_is8bit function that can be used to detect 8bit strings. |
| 224 | - Added sq_mb_list_encodings function that provides list of encodings |
| 225 | supported by PHP mbstring module. |
| 226 | - Added Content-Transfer-Encoding: 8bit header for read receipts that contain |
| 227 | 8bit symbols. (provides fix for #934033). |
| 228 | - Fixed decoding function problems when mbstring.func_override has |
| 229 | MB_OVERLOAD_REGEX enabled. |
| 230 | - Security: Fixed XSS exploit in decodeHeader function. [CVE-2004-1036] |
| 231 | - Added site configuration and custom translation engine support to translate |
| 232 | plugin. |
| 233 | - Fixed SquirrelSpell error output. Patch courtesy David Boone. |
| 234 | - Fixed bug in IMAP read routines that treated "0" as false instead of |
| 235 | a string (patch courtesy Maurice Makaay). |
| 236 | - Fixed PHP notice when header property value is blank. |
| 237 | - Added compact paginator option. Patch by Felix Egli. |
| 238 | - Fixed reply/forward form in order to avoid warnings in SSL enabled sites. |
| 239 | Patch by Felix Egli. |
| 240 | - Removed command line option unsupported by qmail-inject in |
| 241 | class/deliver/Deliver_SendMail.class.php. Thanks to Ken Brush. |
| 242 | - Global file based address book is controled in configuration. Removed |
| 243 | global_file address book backend (use 'local_file' instead). |
| 244 | - Added Net-Style theme by Gabriele Maidecchi. Closes patch #1041323. |
| 245 | - Fix: Messages shown with bad times in message list due to misinterpreted |
| 246 | UW IMAP internal date. |
| 247 | - Fixed path used by random theme. |
| 248 | - Utf7-imap encoding/decoding functions will check, if required charset is |
| 249 | supported by mbstring and use it. Fixes bug #1005353. |
| 250 | - LDAP backend will use internal SquirrelMail charset conversion functions |
| 251 | instead of PHP XML extension. Fixes bug #655137. |
| 252 | - Added Wood and Silver Steel themes by Pavel Spatny and Simple Green theme. |
| 253 | - Fix two time zone calculation bugs, thanks to David White. Fixes #1063879. |
| 254 | - 'Priority' and 'Importance' headers are now also recognised, next to the |
| 255 | 'X-Priority' header that we've supported since a long time. Fixes #1039935. |
| 256 | - Handle a reload of the signout page gracefully: do not present an error |
| 257 | about having to be logged in to be able to sign out. Fixes #1070069. |
| 258 | - Prevent & being eaten in set_url_var, thanks Marcin Orlowski (#1053725). |
| 259 | - Removed internal_link hook. |
| 260 | - Added sq_setlocale function in order to use multiple locale names. |
| 261 | - Set up language before outputing errors in signout.php to make them appear |
| 262 | in the correct language. |
| 263 | - Added size attributes to new_mail sound tags. Fixes #818958. |
| 264 | - Removed extra ; in SquirrelMail added Received header per RFC 822 |
| 265 | (#1088548). |
| 266 | - Add IMAP server type "hmailserver" to make search work with hMailServer. |
| 267 | Fixes #1085377. |
| 268 | - Reuploaded newmail plugin sounds. Fixes files uploaded to cvs without binary |
| 269 | option. |
| 270 | - Changing your JavaScript preference required a re-login to work. |
| 271 | Fixes #983614. |
| 272 | - Fix listcommands plugin to behave like normal reply/compose |
| 273 | links, and return to message page that originally called from. |
| 274 | - Max upload file size now correctly handles a '-1' value, meaning |
| 275 | unlimited. (#1094569). |
| 276 | - Security: Added hook for Preferences Backend to resolve potential |
| 277 | file inclusions. [CVE-2005-0075] |
| 278 | - Remove Printer Friendly Clean Display config option, the cleaning |
| 279 | is now always done. |
| 280 | - Create new Options section "Compose Preferences" and move some |
| 281 | options from Display Preferences there; also move some around within |
| 282 | Display Preferences. |
| 283 | - Security: Fix possible file/offsite inclusion in src/webmail.php. |
| 284 | [CVE-2005-0103] |
| 285 | - Security: Fix possible XSS issues in src/webmail.php. [CVE-2005-0104] |
| 286 | - Fix undefined variables in src/webmail.php. |
| 287 | - 24hr clock format should include a leading 0. |
| 288 | - Removed numeric keys for plugin array in config.php. |
| 289 | - Fixed translations of "On DATE, AUTHOR Wrote" and "AUTHOR Wrote" replies. |
| 290 | - Added sq_str_pad function for padding of multi-byte strings. |
| 291 | - Added sq_strlen function for calculation of multi-byte string length. |
| 292 | - Quoted "INBOX" in check for the status of INBOX in a LIST call. Fixes an |
| 293 | issue with a specific IMAP server. |
| 294 | - Move default_pref to the config/ dir, but keep checking legacy locations |
| 295 | first for bc. Do not fail with an error when default_pref not found, just |
| 296 | create an empty one. |
| 297 | - Add trailing slash for data directory used by global file based address |
| 298 | book (#1105760). |
| 299 | - Fixed sorting problem is get_squirrel_sort() function (#1115403). |
| 300 | - Add "Show Only Subscribed Folders" option to allow users to show all |
| 301 | folders instead of only subscribed ones (#1105756, #1105250). |
| 302 | - Add workaround for Mercury/32 servers that will subscribe again to |
| 303 | an already subscribed folder (#1115409). |
| 304 | - Added blank.png for missing image support. |
| 305 | - Use the proper attachment filenames in case of forwarding a message. |
| 306 | - Fix for #855320 where Outlook Express was creating CID: based URLs, |
| 307 | but not assigning a content-id to the attachment. This is a bug in |
| 308 | Outlook Express and is non-RFC compliant behaviour. |
| 309 | - Strip <outbind://> tags out. This is a Microsoft only protocol and |
| 310 | references files local to the sending machine. This causes issues |
| 311 | with Internet Explorer. |
| 312 | - Replace <img src="outbind://"> links with clean images to stop |
| 313 | issues with Internet Explorer not being able to track down the image. |
| 314 | - Empty src attribute on img tags causes logouts (IE only), replacing |
| 315 | string with blank.png. |
| 316 | - Added vmailmgrd backend to change_password plugin. |
| 317 | - Fixed change_password_init hook. |
| 318 | - Give an error to the user when SquirrelMail is not configured yet |
| 319 | (instead of "failed to include config.php"). |
| 320 | - Added swf and mp3 support to newmail plugin. Restored custom user media |
| 321 | support. |
| 322 | - Removed unused save_option_header() function from display and compose |
| 323 | option includes. |
| 324 | - Fixed bug #1124764, view unsafe images inside printer friendly view. |
| 325 | - Fixed bug #1032366, remove NUL characters in text attachments on sent. |
| 326 | - URL Encode required for string being passed in mailto: links to pass on |
| 327 | additional values (cc, body, subject etc). |
| 328 | - Fixed bug #801060. Removed option for INBOX in filters plugin as source |
| 329 | is always INBOX. |
| 330 | - Always show Purge link next to Trash, even when empty. |
| 331 | - errors in addressbook_init() function are no longer fatal. If function |
| 332 | fails to activate address book backend, it displays error box (with |
| 333 | error_box() function). error box can be hidden by setting first |
| 334 | function argument to false. |
| 335 | - Sanitized search in ldap address book backend. Use of asterisk |
| 336 | together with other symbols is not supported. |
| 337 | - Added ldap backend to change_password plugin. |
| 338 | - Change defaults of some prefs to more sensible / usable settings. |
| 339 | - Revise the documentation of the packaged plugins. |
| 340 | - Fixed edit form checks in address listing (#1124018). |
| 341 | - After sending resumed draft, return to message list. |
| 342 | - Parse and replace mailto: links with internal compose links when |
| 343 | viewing in HTML format. |
| 344 | - Plugins may now define an "extra" array element to return to the attachment |
| 345 | types hook, which will be also inserted in the attachment link for the |
| 346 | plugin. |
| 347 | - Added mouseover row highlighting on message index. |
| 348 | - Added <label> for checkboxes on message index (when highlighting is off). |
| 349 | - Fixed mailto: parsing in functions/url_parser.php. |
| 350 | - Fixed broken signout page (plugins work here again). |
| 351 | - Fixed configtest to use correct PostgreSQL connection function |
| 352 | (#1166228). |
| 353 | - Added configuration option that blocks remote use of |
| 354 | src/configtest.php by default. |
| 355 | - Fixed ldap checks in configtest.php. |
| 356 | - Added configuration option that controls listing of global file based |
| 357 | address book. |
| 358 | - Fixed administrator's plugin breaks related to latest sqGetGlobalVar() |
| 359 | and $plugins array changes. |
| 360 | - Included local configuration file in config.php generated by |
| 361 | administrator's plugin. |
| 362 | - Updated the Filters plugin to comply with our Plugin Standards. |
| 363 | - Fixed Filters plugin problems with duplicate rule processing and false |
| 364 | unread message counts (Bug# 676073 and patch #919045). |
| 365 | - Strip position:absolute style from HTML mails. |
| 366 | - Add ability to the Filters plugin to filter on Message Body, or both |
| 367 | the Headers and the Message Body. |
| 368 | - Update the message copy and move functions to allow for error handling. |
| 369 | - Fix the filter plugin from halting the login process when copying errors |
| 370 | occur. |
| 371 | - Clean up the folder management (create, rename, subscribe) code. |
| 372 | - Added filtering support to address book LDAP backend (#539534). Thanks |
| 373 | to Tim Bell. |
| 374 | - Added domain scope limit controls to address book LDAP backend. Issue |
| 375 | is specific to Microsoft ADS (#1035454). Thanks to Michael Brown. |
| 376 | - Missing PHP LDAP extension errors are now handled by ldap backend and |
| 377 | errors are displayed after address book initialization. |
| 378 | - LDAP connections are opened during search and not during address book |
| 379 | initialization. |
| 380 | - Fixed wrapping of multibyte strings in message view and replies |
| 381 | (#1043576). |
| 382 | - mbstring internal encoding is switched to ASCII, if mbstring.func_overload |
| 383 | is enabled (#929644). |
| 384 | - Fixed checking for quota when appending to Sent folder (#1172694). |
| 385 | - Create a generic function to empty a folder tree, thanks to |
| 386 | Randy Smith (#1145578). |
| 387 | - Add robots noindex/nofollow meta tag to SquirrelMail generated pages. |
| 388 | - Fix incorrect folder hierarchy display (#1009654), thanks |
| 389 | Awais Ahmad for the patch (#1082558). |
| 390 | - src/delete_message.php script is disabled. It provided functions that |
| 391 | could be implemented without playing with multiple redirects. |
| 392 | - Remove lots of obsoleted code from left_main.php. |
| 393 | - Partial support of IMAP REFERRAL: do not fail on IMAP REFERRAL response |
| 394 | (RFC 2221) but log the user out with a hint. Patch by Ariel Arjona |
| 395 | (#1006242). |
| 396 | - Fixed SquirrelMail language cookie detection in php register_globals=off. |
| 397 | - If default SquirrelMail language is set to empty string, interface will |
| 398 | try to follow browser's HTTP_ACCEPT_LANGUAGE header or fallback to en_US |
| 399 | (#764709). |
| 400 | - If From: field is unset in an email, header object for from field is not |
| 401 | correctly set, and generates an error on reply (#1179754). |
| 402 | - Add Cancel button to addressbook (#1180565). |
| 403 | - RFC 2046: Send mixed messages with multipart/alternative nested boundaries |
| 404 | with correct boundary strings. |
| 405 | - EXPERIMENTAL: Mailbox listing converted to templated layout. Added |
| 406 | template support functions and classes. Rewrote some page header and |
| 407 | mailbox listing functions. Disabled 'show_recipient_instead' option. |
| 408 | Added more columns to mailbox listing and index order options. |
| 409 | - Removed sort by internal date option. Now you can use the Received column |
| 410 | in the index order option page for that. |
| 411 | - WARNING: if same user data storage location is used to store SquirrelMail |
| 412 | 1.4.x and 1.5.1+ user settings, SquirrelMail 1.5.1+ will reset mailbox |
| 413 | display order (Options->Index Options) in stable. Backup your data before |
| 414 | testing 1.5.1+ or use different storage location. |
| 415 | - Added experimental iframe sandbox for display of html formated emails. |
| 416 | - Disabled LOGINDISABLED check in src/login.php when IMAP server mapping is |
| 417 | used. |
| 418 | - Check destination folder in mail_fetch plugin before storing messages |
| 419 | in it. Modify destination folder, if it is renamed or deleted within |
| 420 | SquirrelMail (#584658). |
| 421 | - Made the Flags column a required column in the index order options page to |
| 422 | prohibit missing seen/unseen info in the messages list. |
| 423 | - Fixed disabled prev/next links in the message display when you reach the |
| 424 | end of the page (message set). |
| 425 | - Moved delete button to the right in the message list. |
| 426 | - Fixed imap capability detection in bug_report plugin. It was broken |
| 427 | when IMAP TLS was enabled or imap server mapping was used. |
| 428 | - Added mail_fetch plugin configuration file and moved plugin functions |
| 429 | from setup.php to functions.php file. |
| 430 | - SquirrelSpell plugin was modified to use standard SquirrelMail |
| 431 | preference system. User dictionaries that are stored in $username.words |
| 432 | files should be automatically updated to new format, when user logs in. |
| 433 | Fixed possible php script errors caused by $SQSPELL_APP configuration |
| 434 | variable changes. Removed $SQSPELL_EREG configuration option. Plugin's |
| 435 | version increased to 0.5. |
| 436 | - $skip_SM_header option was replaced with $encode_header_key and |
| 437 | $hide_auth_header options. First option allows to encode user's information |
| 438 | with provided encryption key (set in 2. Server settings -> B. Update SMTP / |
| 439 | Sendmail settings). Second option allows to disable authenticated user part |
| 440 | in Received: header, when user can't forge used email address. It is set in |
| 441 | 4. General Options -> 9. Allow editing of identity. |
| 442 | - Added dovecot preset to configuration utility. |
| 443 | - Modified mercury32 preset in order to remove INBOX prefix in mercury32 4.01. |
| 444 | - Added peardb backend to change_password plugin. |
| 445 | - Tweak IMAP connection error display (#1203154). |
| 446 | - Gracefully recover from over quota error while sending a mail (#1145144). |
| 447 | - Fix get_identities() for the case where the user has not set an email |
| 448 | address: use the fallback $username@$domain that's used in compose aswell. |
| 449 | - Fix "Include me in CC on Reply All" for the case where email address was |
| 450 | not set in the prefs (#781202, #1093363). |
| 451 | - Move documentation for SquirrelMail developers to doc/Development. |
| 452 | - Added id attribute support to form functions. It can be used for Section |
| 453 | 508 or WAI fixes. Original idea and patch by dugan <at> passwall.com. |
| 454 | - Fixed broken attachments caused by inconsistency of PHP chunk_split(). |
| 455 | Thanks to Roalt Zijlstra. |
| 456 | - Identity code was not checking for domain part in username before setting |
| 457 | email address (Bug #1219184). |
| 458 | - Disallow access to the administrator plugin screens when the plugin is |
| 459 | not enabled in the config. |
| 460 | - Security: fix several cross site scripting (XSS) attacks. Thanks go to |
| 461 | Martijn Brinkers for finding a lot of these. [CVE-2005-1769] |
| 462 | - Update COPYING with new address of the FSF. |
| 463 | - Fixed missing quote character when trying to build cid: urls. |
| 464 | - Added address listing functions and listing controls to address |
| 465 | book LDAP backend. Blocked wildcard searches in file and database |
| 466 | backends when listing is disabled (#529563). |
| 467 | - Some LDAP address book backend configuration options (listing |
| 468 | controls, filtering, scope limit) are moved to 'advanced |
| 469 | configuration' subsection. |
| 470 | - Javascript relied on rg=1 in the login page to force focus to |
| 471 | password box if username was supplied as a url arg (#1222617). |
| 472 | - Fix variable typo in parseFetch which caused IMAP errors on Exchange. |
| 473 | Thanks Christian Froemmel. |
| 474 | - Added Bluesome theme by Saku Lehtiö (#1188209). |
| 475 | - Rewrite of advanced identity handlying to remove stupid extraction |
| 476 | of all post variables. [CVE-2005-2095] |
| 477 | - Added StartTLS support to address book LDAP backend (#1197703). Patch |
| 478 | by John Lane. |
| 479 | - Added subtree/one level search options to address book LDAP backend |
| 480 | (#1212618). |
| 481 | - Added Simple Green 2 and Simple Purple themes by Vicky Pyne (#1217066 |
| 482 | and #1217069). |
| 483 | - sqimap_messages_delete|copy|flag and sqimap_get_small_header() |
| 484 | functions are removed from SquirrelMail IMAP API. Use sqimap_msgs_* |
| 485 | and sqimap_get_small_header_list() functions instead. |
| 486 | - Fix for bad cache on massive expunge/delete/move operations. |
| 487 | - Moved time zone configuration from locale/timezones.cfg to php array. |
| 488 | Adds time zone name localization options and fixes problems on systems |
| 489 | that don't support GNU C time zone mappings (#1177067). |
| 490 | - Use default color theme in logout_error function when possible. |
| 491 | - Fixes for increased error checking in PHP 5.0.5+ array_shift() (#1237160). |
| 492 | - Added extra checks in delivery class for In-Reply-To header. Fixes |
| 493 | E_NOTICE level warnings in php 5.0.4 and later (#1206474). [php5] |
| 494 | - Added extra checks in SquirrelMail charset_encode() function in case |
| 495 | somebody removes HTML to US-ASCII conversion library (#1239782). |
| 496 | - Fixed invalid reference in src/download.php. E_NOTICE level warnings |
| 497 | could corrupt attachments in php 4.4.0. |
| 498 | - Added internal dgettext() and dngettext() functions. |
| 499 | - Added display of attachments on printer friendly page. |
| 500 | - Added custom error handling class and related functions. |
| 501 | - Added option to disable upload of sounds in newmail plugin. |
| 502 | - Removed full URL from sound file preferences in newmail plugin |
| 503 | (#1233530). |
| 504 | - Stripped BaseDN from nicknames in address book's ldap_server backend. |
| 505 | - Fixed error handling in SquirrelSpell plugin. sprintf and gettext |
| 506 | formating errors in check_me.mod. Reported by Edward Chapman. |
| 507 | - Translations are loaded automatically from locale/<localename>/setup.php |
| 508 | files (#1240889). |
| 509 | - Allow configure to be ran from any directory, thanks Ceri Davies. |
| 510 | - Removed $available_languages configuration option. List is limited to |
| 511 | installed translations. Similar feature is implemented in limit_languages |
| 512 | plugin. |
| 513 | - Don't load plugins/administrator/auth.php during plugin initiation. |
| 514 | - Removed function references from address book database backend class, |
| 515 | list_addr(), lookup() and search() functions. Referenced lookup() |
| 516 | function caused E_NOTICE warnings in php 4.4.0. Reported by Cor Bosman. |
| 517 | - Test to ensure folder exists before attempting to delete it, otherwise |
| 518 | IMAP server will return an error. |
| 519 | - Added $save_html argument to charset_decode() function in order to be |
| 520 | able to convert html formated mails to different character set. Initial |
| 521 | patch by Peter Draganov (#1195232). Fixed display of html formated emails |
| 522 | in formatBody() function (#1258925). |
| 523 | - login_form hook changed from do_hook to concat_hook_function in order to |
| 524 | place form elements before login button (#1245070). |
| 525 | - Forwarding broken when not using compose in new window (#1222436). |
| 526 | - Drop data/ dir from distributed tarball. |
| 527 | - Readded options_identity_process and options_identity_renumber hooks |
| 528 | broken by CVE-2005-2095 fixes. |
| 529 | - Removed duplicate generic_header hook call in src/right_main.php (#1269189). |
| 530 | - Removed other special folders from rename/delete/unsubscribe folder forms. |
| 531 | Suggested by Florian Daumling. |
| 532 | - Focus on compose screen no longer shifts automatically if user has manually |
| 533 | focused somewhere herself. |
| 534 | - Running SquirrelMail with PHP register_globals = on will cause fatal error |
| 535 | in src/configtest.php. |
| 536 | - Added field size controls to database preference backend (#1233721). |
| 537 | - Added bincimap preset (#1285099). |
| 538 | - Fixed IMAP search command in filters plugin. Command was breaking |
| 539 | sqimap_mailbox_exists() check. Reported by Daniel Watts. |
| 540 | - Fixed decoding of quoted-printable text in decodeBody function. |
| 541 | Reported by João Carlos Mendes Luís. |
| 542 | - Added CR trimming to SquirrelSpell plugin in order to fix problems on |
| 543 | Windows systems. |
| 544 | - Sanitized names displayed in address book listing. |
| 545 | - Added extra field controls to address book class. |
| 546 | - HttpOnly cookie support (cookies inaccessible by JS). This will protect |
| 547 | IE6 browsers. |
| 548 | - Rare case of session being destroyed causing PHP errors, so ensure session |
| 549 | is restarted. |
| 550 | - If you don't have any filters defined, and spam filters are disabled, no |
| 551 | point issuing a STATUS call on INBOX for the filters plugin. |
| 552 | - Added folder filtering controls to SMOPT_TYPE_FLDRLIST option widget. |
| 553 | - Security: Fixed possible XSS issue in search feature. Issue was |
| 554 | originally resolved in stable, but changes not migrated forward. |
| 555 | - Update the cached mailbox header with the \Answered flag in case of an |
| 556 | reply. |
| 557 | - Added site configuration options to bug_report plugin. Plugin is available |
| 558 | only to interface administrators by default. See more information in |
| 559 | plugins/bug_report/README file. |
| 560 | - E_NOTICE and unlink error message if user hits delete multiple times |
| 561 | before compose page has reloaded. |
| 562 | - Undefined variable in rare case in view_header.php |
| 563 | - Variable by reference fix in printer_friendly_bottom.php. |
| 564 | - Undefined index in addressbook backends. |
| 565 | - sqimap_utf7_decode_mbx_tree returns variables by reference, rather than a |
| 566 | return value (#1351822) |
| 567 | - Make test for IE6 in SendDownloadHeaders also match versions higher |
| 568 | than 6 (#1339211). |
| 569 | - Allow double quote to be used in MOTD (#1276959). |
| 570 | - Prevent right_frame to be set to '//www.example.com'. |
| 571 | - Tweak printer friendly attachment view. |
| 572 | - Added new compose_send_after hook. |
| 573 | - Added new scheme to allow multiple plugins to share the onsubmit handler |
| 574 | for the compose form from the compose_form hook. See plugin.txt for more |
| 575 | information. |
| 576 | - Support for LIST-SUBSCRIBED extension. This speeds up the retrieval of |
| 577 | the subscribed mailbox-list. |
| 578 | - Properly clean up temporary attachment files when saving as Draft |
| 579 | (#1358407) and fix attachment cleaning code on logout. |
| 580 | - Fixed error message in addressbook.php lookup (#1351825). |
| 581 | - Fixed incorrect curly escape in sqimap_append(). Error triggered by PHP 5.1 |
| 582 | bugfix (#1366982). |
| 583 | - Fixed ContentType object check in Rfc822Header class. E_NOTICE error |
| 584 | in PHP 5.1. |
| 585 | - Key value being overwritten by reuse of var in filters plugin. |
| 586 | - Add doc/security.txt with some hints for a more secure installation. |
| 587 | - Added sqauth_read_password() and sqauth_save_password() functions. |
| 588 | - Unset global GET, POST and COOKIE variables registered in PHP |
| 589 | register_globals=on setups. |
| 590 | - Capabilities array now contains all multivalue information provided |
| 591 | by the IMAP server. (Such as THREAD=SORT, THREAD=REFERENCES). |
| 592 | - Inclusion of Compatibility plugin automatic (no patch needed for plugin) |
| 593 | - Moved sqm_baseuri() into more centralized location (strings.php) |
| 594 | - Introduced $sendmail_args configuration variable in order to control |
| 595 | /usr/sbin/sendmail command arguments (#1365779). Deliver_SendMail class was |
| 596 | modified to provide support of $sendmail_args. Modifications broke backwards |
| 597 | compatibility with qmail-inject workarounds. |
| 598 | - Added execution error handling in Deliver_SendMail class (#1374174). |
| 599 | - Sanitized Draft folder error message in compose. |
| 600 | - Fixed character wrapping/encoding issues in Japanese translation (#1377622). |
| 601 | Issue is specific to sqBodyWrap() and string function wrappers introduced in |
| 602 | 1.5.1. |
| 603 | - Security: MagicHTML fix for comments in styles which allowed |
| 604 | for cross site scripting when using Internet Explorer |
| 605 | [CVE-2006-0195]. |
| 606 | - Added 'mail' and 'sn' attributes to address book LDAP backend search |
| 607 | expression (#1368154). |
| 608 | - Added mailbox caching code by Michael Long. |
| 609 | - Prevent output of whitespace during plugin activation. Fixes possible |
| 610 | attachment corruption by incorrectly coded plugins. |
| 611 | - Fixed data sanitizing in calendar plugin (#1291081)(#705796). |
| 612 | - Security: Prohibit imap injection attempts (reported by Vicente Aguilera) |
| 613 | [CVE-2006-0377]. |
| 614 | - Don't move messages in sqimap_msgs_list_move() function call, when target |
| 615 | mailbox is same as source mailbox. Adds fifth argument to |
| 616 | sqimap_msgs_list_move() function. Fixes possible issues on MacOS Cyrus |
| 617 | IMAP server (#1409453). |
| 618 | - Style sheets are moved to template. |
| 619 | - displayHtmlHeader() function call sends http headers in order to prevent |
| 620 | page caching. |
| 621 | - Added Template set selection. |
| 622 | - Merged patch from Steve Brown to transform current templates to css |
| 623 | based templates. |
| 624 | - Added footer template to every page. |
| 625 | - Added experimental IMAP and SMTP STARTTLS extension support. |
| 626 | - Security: Fix possible cross site scripting through the right_main |
| 627 | parameter of webmail.php. This now uses a whitelist of acceptable |
| 628 | values. [CVE-2006-0188] |
| 629 | - Disabled display of regexp compilation errors in local_file address |
| 630 | book backend. |
| 631 | - DOCTYPE tags are switched from quirks to standard compliance mode. |
| 632 | - Improved error reporting concerning THREAD, SORT and BADCHARSET. |
| 633 | - Added options to disable THREAD and SORT extension. |
| 634 | - Fixed mailbox cache issues caused by using prev/next links in |
| 635 | read_body.php. |
| 636 | - Added View as HTML support to the SquirrelMail core. |
| 637 | - Fixed bug #550557. |
| 638 | - Applied status cache patch created by Michael Long. |
| 639 | - Updated newmail plugin to make use of status cache (Michael Long) |
| 640 | - Added RECENT check to left_main.php to bold the unseen message string if |
| 641 | there are recent messages. |
| 642 | - Fixed search query in filters.php, now we respect the imap continuation |
| 643 | request (Michael Long). |
| 644 | - Fixed bug in digest message view where the from name disappeared after |
| 645 | opening a digest message. |
| 646 | - Fixed checkall link in case javascript was disabled. |
| 647 | - Rewrite of thread parsing code in order to improve performance. |
| 648 | - Adapted message squisher function to gain performance. |
| 649 | - Fixed bug #1093360, skip untagged NO responses in APPEND query. |
| 650 | |
| 651 | Version 1.5.0 - 2 February 2004 |
| 652 | ------------------------------- |
| 653 | - Added new preference that determines cursor focus when replying |
| 654 | - Added support in conf.pl for MS cls command. |
| 655 | - conf.pl changes for relative paths outside the SM tree (#715119). |
| 656 | - conf.pl changes for delete_folder restrictions with Courier-IMAP and |
| 657 | UW-IMAP (#715550). |
| 658 | - Fixed code to allow for \ in password/username (#718116). |
| 659 | - Added mailto: support for Windows clients. See |
| 660 | contrib/squirrelmail.mailto.reg |
| 661 | - Added lowsrc to the list of attributes to be removed. |
| 662 | - Fixed message highlighting for To, CC and From and |
| 663 | for RFC1522 headers (bug #719564) |
| 664 | - Fixed incorrect folding inside message-id's |
| 665 | - Fix for Folders being listed in create/remove/rename operations |
| 666 | (#725443, #722823, #729225) |
| 667 | - Fix for bad attachment view link (#697381, #729295) |
| 668 | - Fix comp_in_new in search and addressbook not having right parameters (#731768). |
| 669 | - Fix max attachment filesize off by factor 10 when ini_var set in bytes (#730742). |
| 670 | - Fix for parsing fetch results. We are now able to extract the UID if it's |
| 671 | returned after the header. |
| 672 | - Remove obsoleted parsing functions. |
| 673 | - Fixed language bug in posting on modifying/deleting servers on mail_fetch plugin |
| 674 | (#742705). |
| 675 | - Fixed infinite loop in parseAddress on invalid mailaddress (#742584). |
| 676 | - Rewrote ugly "Not a very useful errormessage" to something more friendly. |
| 677 | - Make central function for compose links to make sure compose_in_new always |
| 678 | works the same way. |
| 679 | - Fix that when JavaScript off, compose in new was broken (#749654). |
| 680 | - Do not output JavaScript functions in page_header when JavaScript off. |
| 681 | - Support MS Exchange "DOMAIN/username/mailbox"-style usernames (#745814). |
| 682 | - Do not set Full Name to empty when edit_identity is false and edit_name is true (#750728). |
| 683 | - Added koi8-u, windows-1255, windows-1256, iso-8859-6 charset decoding support. |
| 684 | - Rewrite of sqimap_read_data_list which as result we better handle the |
| 685 | returned imap responses and we display error messages when connections are |
| 686 | dropped. |
| 687 | - Rewrite of email address parser and solve the infinite loops issues due to |
| 688 | bad formatted addresses. |
| 689 | - Modified conf.pl: default to force usernames lowercase for servers which |
| 690 | are case-insensitive. |
| 691 | - Applied bugfixes from stable to htmlfilter code. |
| 692 | - Fix bug #722933 where resuming a draft message would lose the reference headers. |
| 693 | - Removed hard coded colors from login.php and made it use the default theme and css file |
| 694 | - Fix that sending of read receipts failed when JavaScript on and comp in new off (#738130). |
| 695 | - Replaced search with new version by Alex Lemaresquier. (Originally |
| 696 | "asearch" plugin). |
| 697 | - New debugging function: sm_print_r() in strings.php. |
| 698 | - Use SM_PATH in config_default. Change default server type to 'other' instead |
| 699 | of cyrus. (#766577). |
| 700 | - Added feature to allow user to switch on full date display in mailboxes instead |
| 701 | of just partial date/time based on time of email and current date. |
| 702 | - Fixed bug that would cause e-mails dated in the future to be displayed with only |
| 703 | the time. |
| 704 | - Fixed unseen/total notifications to return behaviour back to 1.2.x style. |
| 705 | - Added 4 hooks (internal_link, mailbox_display_buttons, move_messages_button_action, create_collapse_link) |
| 706 | - Fix SquirrelSpell JS problem with other plugins that use forms (ie Menu Buttons). |
| 707 | - Fix when forwarding messages as attachment from message list, the displayed subject |
| 708 | was wrong (appearing to the user that the wrong messages were attached). |
| 709 | Closes #772371. |
| 710 | - Fix that when user has no theme preference set, Alien Glow would be selected under |
| 711 | display preferences instead of Default. |
| 712 | - Updated 'action' to be 'smaction' so that plugins can modify the submit/action of |
| 713 | forms. This was suggested for the gpg plugin, but might be useful elsewhere. |
| 714 | - Add support for Mail-Followup-To header. |
| 715 | - Add a confirmation for the user that their mail has been sent. |
| 716 | - Fixed issue with forwarding emails having a ) appended to the end. |
| 717 | - Add "attachments_bottom" hook to allow manipulating/adding to the attachments |
| 718 | - Fix to prevent username & password from being displayed in error messages |
| 719 | if IMAP connection dropped during login |
| 720 | - Modified preference loading code to always have a complete $color array |
| 721 | set in case a user uses an incomplete theme. |
| 722 | - new function sqimap_msgs_list_move() to replace sqimap_msgs_list_copy() |
| 723 | - sqimap_msgs_list_copy() no longer deletes messages copied. |
| 724 | - Workaround for Mozilla bug #200412 in order to show multipart/related html mail. |
| 725 | - Fix for disappearing '0' from decoded strings (bug #784193). |
| 726 | - Replace all session_start() calls with sqsession_is_active() to be compatible |
| 727 | with upcoming PHP 4.3.3. |
| 728 | - Encoding of Russian translation changed to utf-8. Lithuanian translation changed |
| 729 | to utf-8. Fix allows to use national letters in folder names correctly. |
| 730 | - Added "Bypass Trash" checkbox to folder index, used with the Delete |
| 731 | button. (update: This needs work and will be changed, possibly removed) |
| 732 | - Fixed a problem with delete_move_next and server thread-sorting. |
| 733 | - New hook function: boolean_hook_function() Used for true/false hooks. |
| 734 | - Calendar plugin: in month view, display events on the same day sorted by time, |
| 735 | and include the time of the event in its tooltip. |
| 736 | - Added default settings for Mercury/32 to conf.pl. |
| 737 | - Fix to prevent mailboxes are deleted in selected stage which is against |
| 738 | RFC3501. |
| 739 | - Fix reply all address string in case the personal name contained a comma |
| 740 | (address separator). |
| 741 | - Added SASL PLAIN to IMAP and SMTP. Thanks to avel for the prodding and |
| 742 | code snippet. |
| 743 | - conf.pl will no longer offer to detect login methods if TLS is enabled. |
| 744 | - conf.pl no longer offers UID support toggle, which is forced true in |
| 745 | global.php |
| 746 | - HTML Filter bugfixes and further strengthening in response to some |
| 747 | findings reported by stardust. |
| 748 | - Disabled Vietnamese and Ukrainian translations. They are done in different |
| 749 | language. |
| 750 | - Removed all translations. SquirrelMail translations are distributed as |
| 751 | separate packages and kept in different cvs module. |
| 752 | - New function: imap_general.php:create_imap_stream() |
| 753 | - Updated src/login.php to detect, handle, and warn on LOGINDISABLED from IMAP server. |
| 754 | - Fixed SquirrelMail to work under PHP5. |
| 755 | - Reintroduce alternating row colors in addressbook, something that has |
| 756 | accidentally disappeared in the past. |
| 757 | - Disabled Quick-email-reporting feature in spamcop plugin. Bug.809452. Admin |
| 758 | can enable it by setting variable in plugins/spamcop/setup.php |
| 759 | - Fix again for Internet Explorer's stupidity of decoding characters, then |
| 760 | executing it blindly. See http://www.securityfocus.com/archive/1/340118. |
| 761 | - Replaced obsolete 2mbit.com RBL with ahbl.org RBL. Bug.No.829887 |
| 762 | - Added a sitewide override for authenticated SMTP - see authentication.txt. |
| 763 | - Fixed sorting of sent_subfolders. |
| 764 | Sent_subfolder plugin is hooked to special_mailbox hook. |
| 765 | - Integration of delete_move_next plugin into core. |
| 766 | - Compression of buttons/headers for message index and message body |
| 767 | - New option to save replies in the same folder as the original message. |
| 768 | - Remove possible unneeded IMAP call for NAMESPACE if it was saved in the |
| 769 | session (suggestion by Michael Long). |
| 770 | |
| 771 | |
| 772 | ************************************** |
| 773 | *** SquirrelMail Stable Series 1.4 *** |
| 774 | ************************************** |
| 775 | |
| 776 | Version 1.4.0 -- 3 April 2003 |
| 777 | ----------------------------- |
| 778 | - Fixed mail_fetch plugin. Now folder edition defaults to actual value. |
| 779 | All settings from other servers are preserved when deleting one. |
| 780 | - Added Vietnamese translation. |
| 781 | - Fixed the newmail plugin. |
| 782 | - Added RECENT response to sqimap_get_status. |
| 783 | - Fixed attachment filename resolving. |
| 784 | - Added check for X-Confirm-Reading-To to make MDN work for messages sent by Pine. |
| 785 | - sqextractGlobalVar removed (use sqgetGlobalVar instead). |
| 786 | - Subfolders of Sent and Drafts show To field instead of From |
| 787 | - Updates in conf.pl to infamous delete_folder setting, including |
| 788 | addition of appropriate default value for courier and UW. |
| 789 | - Fix for date/time display in certain timezones. |
| 790 | - Fix some features of login.php that are used by some plugins and was broken |
| 791 | by register_globals = off. |
| 792 | - Added Greek locale. Thanks to George P. Kremmydas |
| 793 | <george at kefalonia-ithaki.gr> and Alexandros Vellis <avel at noc.uoa.gr> |
| 794 | - Added notes about PHP 4.3.x to documentation. |
| 795 | - Fixed \Noselect mailbox detection. |
| 796 | - Fixed charset decode of base64 encoded strings. |
| 797 | - Fixed encoding of email addresses in our composed messages. |
| 798 | - Fixed folder creation for Courier using Autoconfig options. |
| 799 | - Fixed encoded string handling inside MDN notifications. |
| 800 | - Fixed unfold header routine in imap_messages (for mailbox_display). |
| 801 | - Fixed subject_line hook. |
| 802 | - Fixed sqgetGlobalVar switching. |
| 803 | - Fixed handling of encoding/decoding strings. |
| 804 | - Fixed wrong array_slice call for a subset of the headers. |
| 805 | - Allow encoded personal names in compose.php. |
| 806 | - Improved address parsing of addresses coming from the compose form. |
| 807 | - Fixed uninitialized indices when parsing attachments. |
| 808 | - Support text/directory MIME-type for vCards (RFC 2425). |
| 809 | - Added Arabic locale. Thanks to Asrar Abbasi <asrar at canasoft.net> and |
| 810 | Naveed Saqib <naveed.saqib at biznas.com>. |
| 811 | - Update required PHP version in documentation to 4.0.6. |
| 812 | - Fixed delete_move_next plugin to remember where it moved mail to. |
| 813 | - Fixed compose to remember attachments. |
| 814 | - Security: Fixed possible XSS in compose when replying to malicious sources. |
| 815 | - Add display of the maximum filesize for attachment uploads. |
| 816 | - Do not add < and > if an identity doesn't contain a full name. |
| 817 | - Fixed bug in parsing Content-Type properties part. |
| 818 | - Added move_before_move hook to allow plugins to act upon the different buttons |
| 819 | - Fixed bug in Forwarding of Emails (move_messages.php) |
| 820 | - Fixed variable spelling error in filters.php |
| 821 | - Fixed some operator bugs in compose.php, move_messages.php, and spamcop.php |
| 822 | |
| 823 | Version 1.4.0 RC 2a |
| 824 | ------------------- |
| 825 | - Fix broken themes box in display options. |
| 826 | - Massive overhaul of administrator plugin. |
| 827 | - Added new function sqgetGlobalVar to global.php to provide direct access |
| 828 | to variables in $_GET, $_POST, $_SESSION, $_COOKIE and $_SERVER. |
| 829 | - Patch from O'Shaughnessy Evans <shaug-sqm@wumpus.org> to allow disabled $org_logo |
| 830 | - Lots of language/internationalization updates |
| 831 | - conf.pl fixes for certain uses of SM_PATH, esp. $signout_page. |
| 832 | - SMTP & IMAP auth method "plain" was a misnomer - now corrected to |
| 833 | the more accurate name "login" (Plain to be implemented soon). |
| 834 | - Fix for compose after search bug. (Closes #662346) |
| 835 | - Improved error reporting when sending mail with SMTP. |
| 836 | - Changed SquirrelMail identification to use User-Agent instead of X-Mailer. |
| 837 | - Prevent endless loop when timezone config is not found. Thanks Joshua Colson. |
| 838 | - Fix IMAP error when returning to message from viewing image attachment. |
| 839 | - Do more trimming to indented subjects in threadview so they don't wrap. |
| 840 | - Trash folder now displays purge link in all cases. (Closes #655943) |
| 841 | - Fix typo in delete_move_next plugin which caused PHP file-handle errors. |
| 842 | - Make vCard more liberal in what it accepts (thanks Kurt Pires). |
| 843 | - Fix problem with subject encoding when using Japanse. |
| 844 | - Move login_form hook to be actually in the login form. |
| 845 | - Fix message_details plugin ability to save a raw message. |
| 846 | - Try better to get the filename of an attachment. |
| 847 | - Deliver_SMTP class now uses HTTP_HOST in SMTP HELO. Should fix DNS |
| 848 | issues some people have reported. (Closes #560524) |
| 849 | - Obsolete sqm_topdir(), which caused login trouble with installs that |
| 850 | have open_basedir restrictions. Thanks Jimmy Connor. |
| 851 | - Fix broken abook_take plugin. |
| 852 | - Fix HTML errors that caused display problems in NS4. |
| 853 | - Correctly fold encoded header lines. |
| 854 | - Fix prefs caching not working correctly in PHP 4.3 caused by a stupid |
| 855 | version checking mechanism. |
| 856 | - Security: Fix XSS hole that allowed JavaScript execution by sending someone |
| 857 | an email with specially crafted headers. Thanks Jason Munro, and |
| 858 | Masato Higashiyama. |
| 859 | |
| 860 | |
| 861 | Version 1.4.0 RC 1 |
| 862 | ------------------ |
| 863 | - Change the way highlighting rules are stored to make them more reliable and |
| 864 | easier to manage. |
| 865 | - Reorganization of conf.pl, menu #2 |
| 866 | - Added CRAM-MD5 and DIGEST-MD5 authentication support for IMAP and SMTP |
| 867 | - Experimental TLS support for IMAP and SMTP (requires PHP 4.3.x) |
| 868 | - Override settings with config_local.php |
| 869 | - Compose form no longer shows attachment options if PHP file_uploads |
| 870 | disabled |
| 871 | - Improved bodystructure parsing. |
| 872 | - Support for windows-1257 charset. |
| 873 | - Optimizations to the number of IMAP calls. |
| 874 | - Fix problem with IE6 + iso-8859-13. |
| 875 | - Allow Mail Fetch to use a different POP3 server port number. |
| 876 | - Force magic_quotes_runtime to be off to avoid problems with this setting. |
| 877 | - Introduce check_sm_version function for plugins wanting to know |
| 878 | which version of SquirrelMail this is. |
| 879 | - Configurable session name to avoid conflicts with other PHP applications. |
| 880 | - Miscellaneous fixes for systems with error_reporting set to E_ALL. |
| 881 | - Many many other bugfixes and tweaks! |
| 882 | |
| 883 | |
| 884 | ************************************* |
| 885 | *** SquirrelMail Devel Series 1.3 *** |
| 886 | ************************************* |
| 887 | |
| 888 | |
| 889 | Version 1.3.2 |
| 890 | ------------- |
| 891 | - Rewrite of message delivery related functions. |
| 892 | - User interface modifications. |
| 893 | - Added Japanese support thanks to Masato HIGASHIYAMA <masato@yamaai-tech.com> |
| 894 | - Remove NOOP checks in the POP3 client of mail_fetch to make things more |
| 895 | compatible and not break things which don't need to be broken. |
| 896 | - Fix src directory being moved on Windows systems, bugs #586518 #605256 #610676. |
| 897 | - This release is compatible with installations that have register_globals set to off. |
| 898 | - Do not lose user prefs/sigs/abooks when trying to save to a full disk. |
| 899 | - Make the SquirrelMail link on the right top configurable so a provider can point |
| 900 | to their own FAQ for example. |
| 901 | - Enable TZ in safe_mode if safe_mode_allowed_env_vars permits this bug #612148. |
| 902 | - Fix some bugs in folder management (create, delete,...) and add enhancements. |
| 903 | |
| 904 | Version 1.3.1 |
| 905 | ------------- |
| 906 | - lots of fixes by Marc, including #596781 and #596930 |
| 907 | |
| 908 | Version 1.3.0 |
| 909 | ------------- |
| 910 | - allow_call_time_by_reference=off fixes. |
| 911 | - Added forward as attachment in read_body. |
| 912 | - Better clean-up of left attachments at login. |
| 913 | - Restore compose sessions in case of a expired session. |
| 914 | - Added "Display Message" / "Up" links in read_body to navigate in messages with |
| 915 | attached messages (message/rfc822). |
| 916 | - Don't activate the Send Receipt link when the folder is the Sent folder. |
| 917 | - Moved view_header code out of read_body.php and put it in view_header.php. |
| 918 | - Open message/rfc822 attachments in read_body what makes it possible to |
| 919 | reply to attached messages. |
| 920 | - Rewrite of the newMail function in compose.php. This simplifies the |
| 921 | interface between read_body.php and compose.php. |
| 922 | - Moved compose related code from read_body to compose. |
| 923 | - Rewrite of mailbox-display to make it more modular (we use it in search.php). |
| 924 | - Added support for displaying multiple entities. |
| 925 | - Changed finding display entities. |
| 926 | - Extract disposition and xmailer header information in the headerparser |
| 927 | instead of request them individualy by an imap-call. |
| 928 | - Store message objects in the current session. This saves a lot of imap-calls. |
| 929 | - Added UID support. |
| 930 | - Store addresses in an object instead of a string. |
| 931 | - Rewrite of the bodystructureparser function. Now the message object contains |
| 932 | all described parameters in RFC2060. |
| 933 | - Introduction of the mime class where all mime related functions are situated |
| 934 | - Fixed removing MDN attachments. |
| 935 | - Fixed MDN problems with js confirmbox. |
| 936 | - Speedimprovements in case we download mime-entities. |
| 937 | - Added possibility to extract message/rfc822 attachments and store them as |
| 938 | the original message in a folder. |
| 939 | - Right to left languages implementation initiated |
| 940 | - Enable people with file_uploads = off to still send mail. Patch from Seth |
| 941 | E. Randall. |
| 942 | - Moved the generic_header hook back to page_header.php. bug #554278 |
| 943 | - Make default theme work. Bug #557313, thanks Tyler Bannister. |
| 944 | |
| 945 | Version 1.2.7 -- June 21 2002 |
| 946 | ----------------------------- |
| 947 | - fix for 'compose as new' link. bug #554886 |
| 948 | - fix charset format in the admin plugin. bug #550725 |
| 949 | - fix for errant '.' in default_folder_prefix. bug #551310 |
| 950 | - fix for folder names with '?' and '*'. bug # 559257, #552180 |
| 951 | - added the ability to search without the charset argument. #552288 |
| 952 | - Made /noselect node display optional. bug #554988, patch #452178 |
| 953 | - Improved support for macosx IMAP server thanks Brian Haun |
| 954 | - Added macosx friendly search, thanks Brian Haun bug #553038 |
| 955 | - Fixed word wrap problems when sending mail. bug #552961, #556143 |
| 956 | - Added possibility to use multiple compose windows without loss |
| 957 | of attachements. |
| 958 | - Fixed forward message/rfc822 attachments from a search |
| 959 | - Fix SpamCop plugin. |
| 960 | - Fixed send MDN link. |
| 961 | - Fixed dealing with \r\n and \n in smtp.php. |
| 962 | - Fixed to, cc, bcc arrays in message->header |
| 963 | - Speed optimizements in generating message-lists. |
| 964 | - Fixed loss of attachment with html addressbook. |
| 965 | - Fixed saving drafts with attachments |
| 966 | |
| 967 | Version 1.2.6 -- April 29 2002 |
| 968 | ------------------------------ |
| 969 | - Security: A complete MagicHTML rewrite since the existing codebase was |
| 970 | causing too many XSS problems. Hopefully now Nick Cleaton will |
| 971 | leave us alone. :) Testing credits go to Nick. |
| 972 | - Security: Fix for cross-site scripting vulnerability (bug #545933) |
| 973 | Reported by Nick Cleaton. |
| 974 | - Changing "emtpy" to "purge" for more clarity. |
| 975 | - Security: Fix for cross-site scripting vulnerability (bug #544658) |
| 976 | Reported by Nick Cleaton. |
| 977 | - Fix for incorrect word wrap in Opera (bug #495073) |
| 978 | - Workaround for older prefs: some of them contain "None" for |
| 979 | left_refresh (bug #540108) |
| 980 | - Fix for entities in cc and bcc fields on message display (bug #522493) |
| 981 | - Fixes for quoted values in the addressbook by David Rees (bug #538389) |
| 982 | - Fixed src/src problem (bug #538803) |
| 983 | - Fixed so non-ascii searches no longer fail both when searching |
| 984 | and when applying filters (bug #520918) |
| 985 | - Added POP3 Before SMTP option (feature request: #498428) |
| 986 | - Added a server-side thread sorting option per folder |
| 987 | - Added a server-side sorting global option |
| 988 | - Compose in new window size can be set in Display prefs. |
| 989 | - Logout error system unified. |
| 990 | - Security: Fix for a "theme passed as cookie" exploit. [CVE-2002-0516] |
| 991 | - PostgreSQL is now supported for database backed use |
| 992 | - Added user option to sort messages by internal date |
| 993 | - Changed attachment handling now attachments are adressed to |
| 994 | unique compose session. |
| 995 | - Added forward messages as message/rfc822 attachment |
| 996 | - Fixed handling message/rfc822 attachments |
| 997 | - Fixed folder list display when special folders have subfolders |
| 998 | - Added option to auto-append sig before reply/forward text (523853) |
| 999 | - Fixed subfolders being "orphaned" when renaming parents (498167) |
| 1000 | - Filters can be applied to only new mail. |
| 1001 | - Filters are updated when renaming/deleting folders (512056) |
| 1002 | - Filtering now happens on login (filters plugin) |
| 1003 | - Added option for WIDTH and HEIGHT tags to Org. Logo. (patch #412754) |
| 1004 | - Fixed resume draft bug #513521, #514639 |
| 1005 | - Newmail plugin: admin can disable the use of audio (patch #517698) |
| 1006 | - Fixed quoting problem in safe html (patch #516542) |
| 1007 | - SPAM folder no longer special folder (filters plugin) |
| 1008 | - Filtering now happens on folder list refresh (filters plugin) |
| 1009 | - Added checking of input of the folders page |
| 1010 | - Made erronous deleting of folders harder (patch #514208) |
| 1011 | - Made SquirrelMail display \Noselect nodes in Cyrus also made it |
| 1012 | impossible to try to delete \Noselect nodes. (patch #452178) |
| 1013 | - SquirrelSpell version 0.3.8 -- pretty configuration error reporting |
| 1014 | added by popular demand. |
| 1015 | - Improved the handling of IMAP [PARSE] messages to reduce retrieval error. |
| 1016 | - Fixed small bug in handeling timezone (bug #536149). |
| 1017 | - MDN message now RFC compatible (bug #537662). |
| 1018 | - Fixed html tables in printer_friendly_bottom.php (patch #542367), and |
| 1019 | make it so that printer friendly uses black-on-white colors in stead |
| 1020 | of the theme colors. |
| 1021 | - Fixed return address of MDN receipts when having multiple identities |
| 1022 | (patch #530139). |
| 1023 | |
| 1024 | Version 1.2.5 -- 22 February 2002 |
| 1025 | --------------------------------- |
| 1026 | - Multiple mailbox list calls cached. |
| 1027 | - Added 'View unsafe images' link to the bottom of pages which contain |
| 1028 | unsafe images. |
| 1029 | - Fixed 'too many close table tags' and various other issues |
| 1030 | which meant SM output didn't always validate as clean HTML. |
| 1031 | - Added the ability to add special folders through plugins. |
| 1032 | - Added an Always compose in a pop-up window option. |
| 1033 | - Search page update with ability to save searches and search |
| 1034 | all folders at once. |
| 1035 | - Made searching on multiple criteria possible, with thanks to Jason Munro |
| 1036 | - Fixed 'list all' in addressbook (#506624, thanks to Kurt Yoder) |
| 1037 | - Fixed small bugs in db_prefs |
| 1038 | - Allowed SquirrelMail to work from within a frame, eg. not using _top |
| 1039 | this is configureable. (thanks to Simon Dick) |
| 1040 | - Added options to conf.pl to enable automated plugin installation: |
| 1041 | ./conf.pl --install-plugin <pluginname>. This allows plugins to be |
| 1042 | distributed in packages. Conf.pl now also reports when saving fails. |
| 1043 | - Attachment hooks now also allow specification of generic rules like |
| 1044 | text/* which will be used when no specific rule is available. |
| 1045 | - conf.pl can now configure database backed address books and |
| 1046 | preferences. |
| 1047 | - Version 0.3.7 of SquirrelSpell. Fixes a potential privacy |
| 1048 | vulnerability (symlink attack), plus introduces formatting fixes |
| 1049 | and javadoc-style comments. |
| 1050 | - Bugfix in mailfetch reported by Mateusz Mazur |
| 1051 | - Administrator plugin. A web based conf.pl replacement. |
| 1052 | - Removed GLOBALS from conf.pl |
| 1053 | - HTML messages optimization. |
| 1054 | - Added support for requesting read receipts (MDN) and delivery receipts. |
| 1055 | - Added the ability to stop users changing their names and email addresses. |
| 1056 | - Added signature into multiple identities (Stefan Meier <Stefan.Meier@cimsource.com>) |
| 1057 | - Updated user help files to reflect UI chanegs and added functionality. |
| 1058 | |
| 1059 | Version 1.2.4 -- 25 January 2002 |
| 1060 | -------------------------------- |
| 1061 | - Security: Fixes a nasty remote arbitrary command execution vulnerability |
| 1062 | in the spellchecker plugin. |
| 1063 | |
| 1064 | Version 1.2.3 -- 21 January 2002 |
| 1065 | -------------------------------- |
| 1066 | - Fixed focus system on pages that contain forms. |
| 1067 | - Fixed IMAP code to send different command identifiers as per |
| 1068 | section 2.2.1 of RFC 2060. |
| 1069 | - Fixed 'sticky priority' so that replies are set to the same |
| 1070 | priority as the original message. |
| 1071 | - Fixed Printer Friendly to print HTML messages. |
| 1072 | - Fixed multiple receivers in Sent mailbox (#500910). |
| 1073 | - Disabled prefs caching under PHP 4.1 |
| 1074 | - Added "Search Memory". Enabling to store up to |
| 1075 | 9 predefined searchs. |
| 1076 | - Increased security in html message. |
| 1077 | - Added the possibility to specify system-defined css in order to |
| 1078 | allow users to change the font family and size of SM. Making possible to |
| 1079 | make it bigger or smaller depending on their screen size. Sysops may add |
| 1080 | or remove these system-defined css located in themes/css/ |
| 1081 | - Fixed a bug appearing on some apache virtual hosts |
| 1082 | - Fixed javascript error (#505255) |
| 1083 | - Fixed the db_prefs so they work again (#499609, thanks to Simon Dick) |
| 1084 | |
| 1085 | Version 1.2.2 -- 1 January 2002 |
| 1086 | ------------------------------- |
| 1087 | |
| 1088 | - Fixed an infinite loop in printer friendly when wrapping option |
| 1089 | is not in the prefs. |
| 1090 | Bug reported by Boris Manojlovic <steki@verat.net> |
| 1091 | - Html cleanup, with patch from Dave Huang (#496712) |
| 1092 | - Fixed a problem saving prefs when using PHP 4.1 |
| 1093 | - Russian, Thai, Swedish, Dutch and French update. |
| 1094 | - Changed configure invocation from bash to sh. (Bug #496752) |
| 1095 | - Changed conf.pl invocation from '#!/usr/bin/perl' to |
| 1096 | '#!/usr/bin/env perl' to help people who have perl somewhere |
| 1097 | else. (Bug #496753) |
| 1098 | - Fixed sorting of folder list, bug #497181 |
| 1099 | - Fixed wrong behavior of non-javascript select all, bug #496681 |
| 1100 | - Added "Show Pages" link to message list showing all messages |
| 1101 | (the resultant page of clicking "Show All") |
| 1102 | - i18n Fix. Because of different configurations in the gettext system, |
| 1103 | some installations could not manage correctly SM languages other than |
| 1104 | English. This has been corrected. |
| 1105 | - Miscellaneous rewrites and improvements. |
| 1106 | - Moved locale files into the ISO-conformant directories. |
| 1107 | - Moved help files into the ISO-conformant directories. |
| 1108 | - Moved compilepo and mergepo files from locale/ into po/ |
| 1109 | - Slight i18n fixes and rewrites to accommodate for moved files. |
| 1110 | - Fixes for entities in the subject when replying. |
| 1111 | - Fixes for entities in the To: header. (Bug #489365) |
| 1112 | - Fix for incorrect javascript prefs handling (Bug #497688) |
| 1113 | - Added color 15 for themes to separate background and foreground colors. |
| 1114 | - Added several new themes. |
| 1115 | |
| 1116 | Version 1.2.1 -- 25 December 2001 |
| 1117 | --------------------------------- |
| 1118 | |
| 1119 | - Fixed the bug that kept the create, delete, and rename sections |
| 1120 | from appearing in the folders page (#496604) |
| 1121 | - Fixed the motd bug not allowing ' (#496616) |
| 1122 | - Sorting of addressbook_search fixed, thanks to the patch of |
| 1123 | Cor Bosman (xs4all) |
| 1124 | |
| 1125 | Version 1.2.0 -- 25 December 2001 |
| 1126 | --------------------------------- |
| 1127 | |
| 1128 | - Collapsible Folders |
| 1129 | - The Paginator!!! |
| 1130 | - Hundreds of UI Tweaks |
| 1131 | - Message Drafts |
| 1132 | - Rewrite of much of the options pages |
| 1133 | - Multiple identities |
| 1134 | - Reply Citations |
| 1135 | - Better Attachment Handling |
| 1136 | - Integration of Several Plugins into Core Code (including xmailer, |
| 1137 | attachment_common, paginator, priority, printer_friendly, sqclock) |
| 1138 | - Ability to mark messages as Read/Unread |
| 1139 | - New themes (including a Christmas theme, and several changing themes) |
| 1140 | - Rewrite of much of the options pages code |
| 1141 | - Improved support for newer versions of PHP |
| 1142 | - Message lists can be shown with alternating colors for easier reading |
| 1143 | - Can include/exclude yourself when using the "Reply All" |
| 1144 | - Message highlighting comes with dozens more easily accessable colors. |
| 1145 | - Option to set the "Priority" of the message(Normal/High/Low) |
| 1146 | - Now able to show all messages of an inbox at the same time. |
| 1147 | - Cleanup of the paginator code, improving display style |
| 1148 | - Cleanup of configuration file code, a bit |
| 1149 | - Introduction of sent_subfolders plugin as Official Plugin |
| 1150 | - Bugfixes..and more Bugfixes! |
| 1151 | |
| 1152 | |
| 1153 | *************************************************************** |
| 1154 | *** SquirrelMail Development Series 1.1 and 1.1 Pre-Releases *** |
| 1155 | **************************************************************** |
| 1156 | |
| 1157 | Version 1.2.0-rc3 -- 2 December 2001 |
| 1158 | ------------------------------------ |
| 1159 | - Speed improvements and optimizations on much of the code |
| 1160 | - Comments added, formatting cleaned up for much of the code |
| 1161 | - Several plugins integrated into the SquirrelMail core |
| 1162 | (focus change, attachment common, printer friendly, etc) |
| 1163 | - Several plugins added as "Official Plugins" to the main |
| 1164 | SquirrelMail distribution |
| 1165 | - First half of a rewrite of the option pages code |
| 1166 | - The Paginator!!! |
| 1167 | - Other stuff that I don't recall (developers, please fill this in!) |
| 1168 | |
| 1169 | Version 1.1.3 -- (never really released) |
| 1170 | ---------------------------------------- |
| 1171 | - Added major speed improvements to IMAP functions by our |
| 1172 | friends at XS4ALL |
| 1173 | - Fixed MOTD |
| 1174 | - Fixed multipart/alternative messages |
| 1175 | - Updated Dutch translation |
| 1176 | - Added Indonesian translation |
| 1177 | - Added Portuguese (Portugal) translation |
| 1178 | - Added language aliasing |
| 1179 | - Added Turkish translation |
| 1180 | |
| 1181 | Version 1.1.2 -- May 21, 2001 |
| 1182 | ----------------------------- |
| 1183 | - Many bugs squashed |
| 1184 | - Several UI tweaks and improvements |
| 1185 | - Added option (3 -> 14 in conf.pl) to auto create sent and trash folders. |
| 1186 | - Updated Czech translation |
| 1187 | - Support for multiple identities |
| 1188 | - Support for Russian Apache removed. It is now deemed easier to just |
| 1189 | turn off Charset Recoding in the Russian Apache config. See the file |
| 1190 | doc/README.russian_apache |
| 1191 | |
| 1192 | Version 1.1.1 -- April 30, 2001 |
| 1193 | ------------------------------- |
| 1194 | - Added built-in support for gettext if compiled support isn't available |
| 1195 | - Made validate.php include a few more standard things |
| 1196 | - Corrected a bug when sending an email properly |
| 1197 | |
| 1198 | Version 1.1.0 -- April 21, 2000 |
| 1199 | ------------------------------- |
| 1200 | - Added option to have signout page redirect to another page (patch from |
| 1201 | Scott Bronson) This can be configured in conf.pl (Org Prefs) |
| 1202 | - Much improved SMTP error handling (patch from Jeff Evans) |
| 1203 | - Preferences are now cached instead of read in every page load. |
| 1204 | - Improved URL parser |
| 1205 | - Added ability to read HTML messages by default instead of plain text |
| 1206 | (Display Options) |
| 1207 | - Added authenticated SMTP server support (configure in conf.pl) |
| 1208 | - Rewrote attachment handling code in compose.php |
| 1209 | - If aliases are typed in To, Cc, or Bcc, they are automatically looked up |
| 1210 | in the addressbook and converted to the associated addresses. |
| 1211 | - Added collapseable folder listing (an option that can be turned on in |
| 1212 | Folder Options) |
| 1213 | - Added alternating row colors to improve interface (Display Options) |
| 1214 | |
| 1215 | |
| 1216 | ************************************** |
| 1217 | *** SquirrelMail Stable Series 1.0 *** |
| 1218 | ************************************** |
| 1219 | |
| 1220 | Version 1.0.6 -- April 19, 2001 |
| 1221 | ------------------------------- |
| 1222 | - Reworked validation for each page. It's now standardized in validate.php |
| 1223 | - Fixed login bug that resulted from 1.0.5 security updates |
| 1224 | - Fixed plugin incompatibilities that were introduced in 1.0.5 |
| 1225 | - Added more security checking to preference saving/loading |
| 1226 | - Updated German translation (thanks to Ronald Bauerschmidt <rb@debian.org>) |
| 1227 | - Updated Finnish help files |
| 1228 | |
| 1229 | Version 1.0.5 -- April 17, 2001 |
| 1230 | ------------------------------- |
| 1231 | - MAJOR security issues addressed. Please upgrade as soon as possible. |
| 1232 | [CVE-2001-1159] |
| 1233 | - Downloading attachments should work better due to a tip by Ray Black III. |
| 1234 | - Fixed bug with drop-down folder list not containing INBOX |
| 1235 | - Added Swedish help files Teemu Junnila <teejun@vallcom.com> |
| 1236 | - Added Italian help files Antonetti Roberto <antonr@piceniaweb.com> |
| 1237 | |
| 1238 | Version 1.0.4 -- April 9, 2001 |
| 1239 | ------------------------------ |
| 1240 | - Fixed some bugs with folder creation |
| 1241 | - Security fix for UW IMAP server to disallow folder paths outside of |
| 1242 | $folder_prefix |
| 1243 | - Some problems with header encoding/decoding fixed |
| 1244 | - Made subject column take up whatever width is available |
| 1245 | - Added bcc to html addressbook search |
| 1246 | |
| 1247 | Version 1.0.3 -- March 9, 2001 |
| 1248 | ------------------------------ |
| 1249 | - Many i18n enhancements/fixes |
| 1250 | - Fixed bug with default theme path being set incorrectly |
| 1251 | - Fixed problem when sending/forwarding multiple attachments |
| 1252 | - Made folder drop-down list consistant in look to the other drop-downs |
| 1253 | - Fixed problem where some attachment filenames would not be displayed |
| 1254 | - Added Finnish help files by Teemu Junnila <teejun@vallcom.com> |
| 1255 | - Updated Norwegian translation |
| 1256 | - Updated Brazillian Portuguise translation |
| 1257 | |
| 1258 | Version 1.0.2 -- February 8, 2001 |
| 1259 | --------------------------------- |
| 1260 | - Added a workaround for RedHat's 4.0.4pl1-3 binary package (It's also |
| 1261 | the same workaround for Konqueror and other PHP installations?) |
| 1262 | - Select All works through the search |
| 1263 | - Better escaped string handling from POST variables |
| 1264 | - Many more code cleanups and optimizations |
| 1265 | - Added Hungarian translation by Teemu Junnila <teejun@vallcom.com> |
| 1266 | - Added Icelandic translation by Karl Hei�r <karlh@macho.is> |
| 1267 | - Updated Taiwan translation |
| 1268 | - Updated Swedish translation |
| 1269 | - Updated Finnish translation |
| 1270 | |
| 1271 | Version 1.0.1 -- February 1, 2001 |
| 1272 | --------------------------------- |
| 1273 | - Improved the way sqimap_read_data() is handled |
| 1274 | - Sped up "no sorting" even more |
| 1275 | - Fixed problems with sending messages |
| 1276 | - Fixed some pass-by-reference calls that caused problems with newer |
| 1277 | PHP versions |
| 1278 | - Fixed bug that didn't display last folder subscribed to |
| 1279 | - Removed requirement of PHP 4.0.1 for array_unique() function |
| 1280 | - Removed unnecessary echo statements by breaking out of PHP |
| 1281 | - Changed evaluation method from using " to ' for speed improvements |
| 1282 | - If no plugin array set in config.php, now handled correctly |
| 1283 | - If subject is > 55 chars, trims it and puts "..." in message list |
| 1284 | - Hundreds of minor changes to remove all verbose PHP warning messages |
| 1285 | |
| 1286 | Version 1.0 -- January 30, 2001 |
| 1287 | ------------------------------- |
| 1288 | - Updated config_default.php to include attachment_common plugin |
| 1289 | (now in distribution) |
| 1290 | - A few minor speed improvements |
| 1291 | - Fixed problems in sqimap_read_body(), made it more reliable |
| 1292 | - Added French translation of help files by gore K <gore_k@ymca-cepiere.org> |
| 1293 | - Added Finnish translation by Teemu Junnila <teejun@vallcom.com> |
| 1294 | - Updated Swedish translation |
| 1295 | - Updated Russian translation |
| 1296 | |
| 1297 | |
| 1298 | ******************************************************** |
| 1299 | *** SquirrelMail Development Series 1.0 Pre-Releases *** |
| 1300 | ******************************************************** |
| 1301 | |
| 1302 | Version 1.0pre3 -- January 22, 2001 |
| 1303 | ----------------------------------- |
| 1304 | - Fixed some "Select All" bugs |
| 1305 | - Finally fixed the IE/SSL download problem!! |
| 1306 | - Added Danish translation by Claus Rasmussen <claus@webclaus.com> |
| 1307 | - Updated Spanish translation |
| 1308 | - Updated Polish translation |
| 1309 | - Updated Taiwan translation |
| 1310 | - Updated Czech translation |
| 1311 | - Updated Korean translation |
| 1312 | |
| 1313 | Version 1.0pre2 -- January 15, 2001 |
| 1314 | ----------------------------------- |
| 1315 | - A number of security fixes |
| 1316 | - Replaced error messages with better, formatted, and meaningful messages. |
| 1317 | - Fixed "reply all" so that it works intelligently now |
| 1318 | - Made deleted (but not expunged) messages easier to detect (only if |
| 1319 | $auto_expunge = false) |
| 1320 | - Fixed bug that didn't display size correctly in search results |
| 1321 | - Major memory management and speed improvements with downloading of |
| 1322 | attachments |
| 1323 | - Made $auto_expunge variable actually do something |
| 1324 | - Fixed bug that didn't display login failure message |
| 1325 | - Fixed minor bug in sqimap_mailbox_list |
| 1326 | - Added sqimap_capability function to check capabilities of server. |
| 1327 | - Rewrote sqimap_get_delim to use NAMESPACE capability (if available) to |
| 1328 | get delimiter. |
| 1329 | - Added Catalan translation of Help documents by Josep Sanz <jsanz@fa.upc.es> |
| 1330 | - Added Taiwan translation by "ching" <ching@kiwa.com.tw> |
| 1331 | |
| 1332 | Version 1.0pre1 -- December 14, 2000 |
| 1333 | ------------------------------------ |
| 1334 | - Fixed bug in sending messages with a blank line with a "." |
| 1335 | - Folder displays have been changed to be more readable in drop-down lists |
| 1336 | - For security, login verification happens, then we're redirected to |
| 1337 | webmail.php |
| 1338 | - Folder sorting now case insensative |
| 1339 | - added config option to set IMAP folder delimiter rather than always |
| 1340 | detecting it |
| 1341 | - Made session cookie parameter use PHP's settings rather than making |
| 1342 | assumptions |
| 1343 | - Select/Deselect all implemented using only HTML (not Javascript) |
| 1344 | - Fixed default charset that is sent with outbound messages (now user's |
| 1345 | preferred charset) |
| 1346 | - Sort method saving now transparent to user, and saves between sessions |
| 1347 | - Now replacing all \n with \r\n before sending the message. |
| 1348 | - Added sorting option for NO sorting.. 10000 times faster! |
| 1349 | - Using <pre> tags for viewing message body instead of <tt> and |
| 1350 | - Added redirection from subdirectories to login page |
| 1351 | - Attachments are shown in message index (shown as a "+") |
| 1352 | - Updated attachment plugin support and passing values to hooks (see |
| 1353 | plugins.txt) |
| 1354 | - Added file and message size in many locations |
| 1355 | - Made message index order customizable (from, subject, date) can be (date, |
| 1356 | from, subject) |
| 1357 | - Fixed some security problems with uploading attachments |
| 1358 | - When reading, attachments look better and have a better plugin interface |
| 1359 | - Some functions now pass values by reference to save on memory |
| 1360 | - Added Catalan translation from Josep Sanz <jsanz@fa.upc.es> |
| 1361 | - Added Serbian translation from Boris Manojlovic <steki@verat.net> |
| 1362 | - Added Polish translation of Help from Krystian Kanabrodzki |
| 1363 | <krys@voruta.eu.org> |
| 1364 | |
| 1365 | |
| 1366 | ***************************************** |
| 1367 | *** SquirrelMail 0.5 and Pre-Releases *** |
| 1368 | ***************************************** |
| 1369 | |
| 1370 | Version 0.5 -- September 25, 2000 |
| 1371 | --------------------------------- |
| 1372 | - Fixed some problems with downloading attachments in IE |
| 1373 | - If no date is set in header, we take internal date of the imap server |
| 1374 | - Fixed some lingering bugs in mime parsing |
| 1375 | - Searching specifies CHARSET option |
| 1376 | - Security fixes |
| 1377 | - Fixed hyperlink rendering problems |
| 1378 | |
| 1379 | Version 0.5pre2 -- September 6, 2000 |
| 1380 | ------------------------------------ |
| 1381 | - Added quite a few new themes |
| 1382 | - Fixed double folder problem on some servers |
| 1383 | - Using encryption for passwords |
| 1384 | - Added a patch from Bill Thousand to allow easier virtual domains |
| 1385 | - Security updates with attachments |
| 1386 | - Added more hooks for plugins, updated plugin.txt |
| 1387 | - Improved HTML address book |
| 1388 | - Fixed bugs in parsing email addresses in smtp.php |
| 1389 | - Applied fixes for Courier IMAP server (by Andreas Dahl) |
| 1390 | - Fixed some buggy IMAP handling |
| 1391 | - Improved word wrapping |
| 1392 | - Fixed bugs with adding and not adding backslashes |
| 1393 | - Made message highlighting case insensative |
| 1394 | - Added Korean translation from Jong-II Kim <aporie@netian.com> |
| 1395 | - Added Italian translation from Aldo Moresco <moresco@idcm.it> |
| 1396 | - Added French translation from Ali Nedjimi <lrdfrx@club-internet.fr> |
| 1397 | |
| 1398 | Version 0.5pre1 -- August 9, 2000 |
| 1399 | --------------------------------- |
| 1400 | - Searching folders functionality added |
| 1401 | - Date display now is similar to Netscape Messenger |
| 1402 | - Many bugs have been reported to the list, and been squashed |
| 1403 | - Help system developed |
| 1404 | - Folder list now shows configurable details about messages |
| 1405 | - It is now possible to select multiple subscribes/unsubscribes |
| 1406 | - Removed a bunch of annoying "success" screens, improved navigation |
| 1407 | - Better IMAP session handling |
| 1408 | - Redid the options section and split it into different parts |
| 1409 | - Added "view all headers" option when reading a message |
| 1410 | - In-Reply-To and References headers are inserted when replying to a message. |
| 1411 | - Changed how attachments are displayed and handled |
| 1412 | - Rewrote MIME support from scratch, optomizing it an unbelievable amount |
| 1413 | - Added support for message highlighting |
| 1414 | - Moved Address and Send buttons on Compose form for easier access |
| 1415 | - Added Polish translation from Lukasz Klimek <casa@LO.Pila.PL> |
| 1416 | - Added Swedish translation from Tobias Ekbom |
| 1417 | - Added Brazilian Portuguse translation from Henrique Moura |
| 1418 | - Added Dutch translation from Arjen Halma |
| 1419 | |
| 1420 | |
| 1421 | ***************************************** |
| 1422 | *** SquirrelMail 0.4 and Pre-Releases *** |
| 1423 | ***************************************** |
| 1424 | |
| 1425 | Version 0.4 -- May 15, 2000 |
| 1426 | --------------------------- |
| 1427 | - If subject is blank, displays "(no subject)" |
| 1428 | - Fixed a few minor bugs and typos reported to list |
| 1429 | - Changed <? to <?php in a few places |
| 1430 | |
| 1431 | Version 0.4pre2 -- May 5, 2000 |
| 1432 | ------------------------------ |
| 1433 | - Replying sets the "Answered" flag on the original message |
| 1434 | - When message is sent, it sends you to the folder you were looking at. |
| 1435 | - HTML based address book search |
| 1436 | - Made folder listing look first at subscribed folders, making it |
| 1437 | faster, even if you don't have $folder_prefix set. |
| 1438 | - Fixed some bugs with default sent and trash folders |
| 1439 | - Fixed some bugs with folder manipulating |
| 1440 | |
| 1441 | Version 0.4pre1 -- April 29, 2000 |
| 1442 | --------------------------------- |
| 1443 | - For speed's sake, unseen messages are only noted on INBOX in left |
| 1444 | folder list. This will change with 0.5. |
| 1445 | - Optomizations, fewer IMAP calls, more efficient sorting algorithms. |
| 1446 | - Fixed all bugs listed in BUG |
| 1447 | - When inside the Sent folder, it displays "To" instead of "From" |
| 1448 | - Added ability to go to Next and Previous message while reading a message |
| 1449 | - Caching of the message headers in mailbox (much faster) |
| 1450 | - Added a preference that allows users to customize how many messages |
| 1451 | they see when they index a mailbox |
| 1452 | - Added flag status showing on message list (Answered, Flagged, and Seen) |
| 1453 | - Now using PHP session management |
| 1454 | - Parsing the body for URLs and Email addrs |
| 1455 | - Added option to configure default folder directory. ie: ~/mail |
| 1456 | - Configuration script added: config/conf.pl |
| 1457 | - Addressbook with LDAP support |
| 1458 | - Big speed improvements with folder listing |
| 1459 | - Added Subscribe/Unsubscribe to folders |
| 1460 | - Fixed bug in UW that didn't mark unseen messages |
| 1461 | - Saving sent messages into $sent_folder |
| 1462 | - It doesn't bail out if PHP wasn't compiled with --with-gettext. |
| 1463 | It only uses english in this case. |
| 1464 | - Added support for Cyrillic (thanks to Artem Botchkov for help) |
| 1465 | - Included information on Russian Apache from Konstantin Riabitsev |
| 1466 | - Honoring charset parameter for the body. |
| 1467 | - Changed the way emptying of trash was done to work better |
| 1468 | across different IMAP servers |
| 1469 | |
| 1470 | |
| 1471 | ***************************************** |
| 1472 | *** SquirrelMail 0.3 and Pre-Releases *** |
| 1473 | ***************************************** |
| 1474 | |
| 1475 | Version 0.3.1 -- March 13, 2000 |
| 1476 | ------------------------------- |
| 1477 | - Fixed a bug that didn't allow downloading of attachments |
| 1478 | |
| 1479 | Version 0.3 (final) -- March 10, 2000 |
| 1480 | ------------------------------------- |
| 1481 | - Fixed bug in smtp.php and made sending RFC complient |
| 1482 | - Fixed a bug that wouldn't let you rename folders with UW server. |
| 1483 | - Other minor bugfixes |
| 1484 | |
| 1485 | Version 0.3pre2 -- March 5, 2000 |
| 1486 | -------------------------------- |
| 1487 | - Rewrote folder deletion. It works much more flexably now. |
| 1488 | - Fixed message deletion that didn't always delete the right messages. |
| 1489 | - Removed font tags |
| 1490 | - Better character translation, especially for i18n |
| 1491 | - Added the choice of language as a user preference |
| 1492 | - Bug fixes, bug fixes, bug fixes |
| 1493 | - Fixed bugs in message moving and deleting |
| 1494 | - Rewrote all IMAP functions from scratch |
| 1495 | |
| 1496 | Version 0.3pre1 -- February 17, 2000 |
| 1497 | ------------------------------------ |
| 1498 | - Added user-specific preferences including: |
| 1499 | Full Name (for outbound messages) |
| 1500 | Reply-to address |
| 1501 | Theme |
| 1502 | Move messages to trash option (true/false) |
| 1503 | Wrap incoming text at XX characters |
| 1504 | Editor window size (in characters) |
| 1505 | Time between reloads of the left folder list |
| 1506 | Signature |
| 1507 | - Rewrote SMTP functions. It now works and handles error correction. |
| 1508 | - Only folders that you're subscribed to will be listed |
| 1509 | - Fixed a bug in outbound messages that translated " into \" |
| 1510 | - Added themes in distribution (7 total) |
| 1511 | - Added option to send email via sendmail rather than SMTP |
| 1512 | - Increased speed of viewing folder by date about 25%, and viewing the |
| 1513 | folder by Subject or Sender by up to 100%. |
| 1514 | - Added internationalization |
| 1515 | - Added sending of attachments |
| 1516 | - Left folder refreshing at intervals (with META tags) |
| 1517 | |
| 1518 | |
| 1519 | ***************************************** |
| 1520 | *** SquirrelMail 0.2 and Pre-Releases *** |
| 1521 | ***************************************** |
| 1522 | |
| 1523 | Version 0.2.1 -- January 05, 2000 |
| 1524 | --------------------------------- |
| 1525 | - Rewrote how MULTIPART messages were handled and made it recursive |
| 1526 | - We now take into account the encoding type rather than guessing |
| 1527 | - Redesigned how attachments are displayed |
| 1528 | - Fixed the bug that wouldn't let you send messages (I hope) |
| 1529 | - Added a "download message" option |
| 1530 | - Added a plain text viewer for text messages |
| 1531 | |
| 1532 | Version 0.2 -- January 02, 2000 |
| 1533 | ------------------------------- |
| 1534 | - Attachment support (much better MIME support in general) |
| 1535 | - Themeable support replaced Custom Colors. Themes are pluggable. |
| 1536 | |
| 1537 | |
| 1538 | ***************************************** |
| 1539 | *** SquirrelMail 0.1 and Pre-Releases *** |
| 1540 | ***************************************** |
| 1541 | |
| 1542 | Version 0.1.2 -- December 20, 1999 |
| 1543 | ----------------------------------- |
| 1544 | - Date translation to local time |
| 1545 | - Rewrote folder fetching code universally |
| 1546 | - Added attachment detection (no downloads yet) |
| 1547 | - Fixed many minor bugs that were reported |
| 1548 | |
| 1549 | Version 0.1.1 -- December 16, 1999 |
| 1550 | ----------------------------------- |
| 1551 | - Reworked all the IMAP functions to make them RFC 2060 compliant |
| 1552 | (should work with all IMAP servers) |
| 1553 | - Added color customization |
| 1554 | - Sorted folder list (on left bar) |
| 1555 | - Added MUCH better error correction and notification |
| 1556 | |
| 1557 | Version 0.1 -- December 14, 1999 |
| 1558 | -------------------------------- |
| 1559 | - Message composing (with to, cc, bcc) |
| 1560 | - Message viewing, including HTML messages |
| 1561 | - Basic MIME support, no attachments...yet |
| 1562 | - Message sorting by Date, Name, or subject |
| 1563 | - Folder manipulation (deleting, creating, moving, and renaming) |
| 1564 | - IMAP email (currently only Cyrus IMAP server has been tested) |
| 1565 | - Many other features that are basic email functionality |