| 1 | ************************************* |
| 2 | *** SquirrelMail Devel Series 1.5 *** |
| 3 | ************************************* |
| 4 | |
| 5 | Version 1.5.1 -- CVS |
| 6 | -------------------- |
| 7 | - New reply citation to include date and author. |
| 8 | - Fix some possible XSS bugs. |
| 9 | - Norwegian Bokmal translation uses nb_NO. |
| 10 | - Integrated Msg_Flags plugin - turn on/off icons using configuration tool, menu |
| 11 | number 11 (Tweaks), option number 3, after which users must select an icon |
| 12 | theme in Options/Display Preferences. "Flag"/"Unflag" buttons are implemented |
| 13 | as separate plugin. |
| 14 | - Added Farsi and Tagalog translation support. |
| 15 | - Enabled Ukrainian and Russian-Ukrainian support |
| 16 | - Subfolders named "foo.inbox" didn't always work well. Fixed. |
| 17 | - sqimap_create_stream() was not obeying passed params properly. |
| 18 | - Fix non-selectable inbox. |
| 19 | - Add src/configtest.php script which checks for common errors in the config. |
| 20 | - Improve display of some unparsable/absent dates (#891354). |
| 21 | - Add comment (Highest,Normal,Lowest) to X-Priority header. |
| 22 | Some SpamAssassin rule triggers on the absence of such a comment. |
| 23 | - Corrected moving of last message in a folder using Delete-Move-Next |
| 24 | functionality added to core in 1.5.0. |
| 25 | - Fix test for LOGINDISABLED, should only test when the auth mech actually |
| 26 | is 'login'. |
| 27 | - Update required PHP version to 4.1.0, and remove PHP 4.0.x legacy code. |
| 28 | - Make writing of preferences, abook, calendars fail better when disk full |
| 29 | (#915527). |
| 30 | - Remove code related to non-UID-supporting IMAP servers. |
| 31 | - Fix quoteimap() regex escaping problem (#921291). |
| 32 | - Added option to suppress Received: line in outbound SM headers (#847107). |
| 33 | - Changed read_body header from links to buttons (looks like message index). |
| 34 | - Add functions for building HTML forms (functions/forms.php). |
| 35 | - Moved javascript_on to session (from prefs). Centralized javascript detection |
| 36 | in prefs.php method checkForJavascript. |
| 37 | - Added abook_init and abook_add_class hooks. |
| 38 | - Fixed "Resume Draft" to continue using selected identities (#845290). |
| 39 | - Fixed RFC2821 incompliancy by adding a fallback mechanism to HELO if |
| 40 | EHLO is not supported. |
| 41 | - Fixed RFC2298 incompliancy by setting envelope sender to null. |
| 42 | - Fixed problem where setting all the messages on the last page of the |
| 43 | message list would return one page higher. |
| 44 | - Remove call to perform expunge on mailbox select - auto-expunge will |
| 45 | still be performed on message delete, etc. |
| 46 | - Allow single quotes to be used in theme name in conf.pl (#805309). |
| 47 | - Fixed on the fly decoding of base64 encoded attachments. |
| 48 | - Fixed message rejects by the postfix sendmail wrapper when attachments were |
| 49 | involved. |
| 50 | - Fixed date display bug for messages of today. Show short format in case |
| 51 | of long format. (only occurs in the timeframe around 0:00 AM till |
| 52 | timezone). |
| 53 | - Added address book sorting options. Ascending/descending sorting code |
| 54 | written by Bryan Loniewski. |
| 55 | - Use Special Folder Color config option works again (#931956). |
| 56 | - In POP3-class, be more liberal regarding RFC-incompliant POP3-servers. |
| 57 | - Added Basque translation support. |
| 58 | - Remove flag buttons / links from display if mailbox doesn't allow it. |
| 59 | - Make used of cached ordered uid list in case of server_side_sorting. |
| 60 | - Rewrite of internal mailbox sorting routines. |
| 61 | - Added sort by message size. |
| 62 | - Fixed XSS vulnerability in content-type display in the attachment area |
| 63 | of read_body.php discovered by Roman Medina. |
| 64 | - Get alternating row colors of addressbook in sync with mailbox list. |
| 65 | - Give proper error when PEAR DB not found. |
| 66 | - Remove inappropriate strip_tags() from add-to-addressbook (#968475). |
| 67 | - Prefs caching didn't work properly with register_globals off (#995102). |
| 68 | - Security: fix SQL injection vulnerability in addressbook |
| 69 | (CVE ID: CAN-2004-0521). |
| 70 | - Removed html_top and html_bottom hooks. No longer used/needed. |
| 71 | - Added "trailing text" for options built by SquirrelMail (text placed |
| 72 | after text and select list inputs on options pages) |
| 73 | - Custom option page values now repopulate correctly |
| 74 | - Added "no focus" option for compose page in display preferences (setting |
| 75 | reply focus to "No focus" also affects composing new messages) |
| 76 | - Current hook name is now globally available when running a hook ($currentHookName) |
| 77 | - Fix bug when Saving to Draft folder that contains special characters. |
| 78 | - Added size limit to signatures saved in file backend. Created error_option_save |
| 79 | function, that allows sending error message to options page. Thanks to Martynas |
| 80 | Bieliauskas for spotting big signature "option". |
| 81 | - Make SquirrelSpell work with safe_mode enabled, if using PHP >=4.3.0. |
| 82 | Patch by Ray Ferguson. |
| 83 | - Make IP-address in Message-ID RFC822 compliant. |
| 84 | - Uneditable address book entries no longer have checkboxes on addresses page. |
| 85 | - Alignment of title text above folder list fixed. |
| 86 | - Changed structure of xtra_code functions that are used by some translations. |
| 87 | - Added Uighur language support. |
| 88 | - Added status bar to compose window when "Compose In New Window" is used. |
| 89 | - Reenabled the move_messages_button_action hook and changed its name to |
| 90 | mailbox_display_button_action to promote the new location |
| 91 | - Making delete button, when viewing a message, consider which page was viewed |
| 92 | before. |
| 93 | - $agresive_decoding configuration option changed to $aggressive_decoding. |
| 94 | Fixed spelling. |
| 95 | - Added $lossy_encoding option (provides fix for #806698) |
| 96 | - Reenabled use of $default_charset option. Option works only with en_US |
| 97 | translation in order to prevent language/charset misconfiguration. |
| 98 | - Fixes for nonpopulation of folder lists and errors when emptying the trash |
| 99 | (provides fixes for #1019185 and #1017941) |
| 100 | - Fixed $custom_css loading in squirrelspell plugin. |
| 101 | - Turkish translation uses C character case conversion rules. Fixes php and |
| 102 | squirrelmail functions are assume English conversion rules. |
| 103 | - Fixed problem that caused an error when deleting all messages on the last page |
| 104 | of a paginated view (provides fix for #1014612) |
| 105 | - Added MySQL password/UNIX crypt support to mysql backend in the |
| 106 | change_password plugin |
| 107 | - Make SMTP Authentication detection in conf.pl more RFC-compliant. |
| 108 | - Fixed IMAP errors when using mail_fetch plugin to auto-fetch on login. |
| 109 | - Fixed folder list in Create Folders list for Courier (properly skip INBOX). |
| 110 | - Fixed undefined variables in sqimap_create_stream(). |
| 111 | - Added Bengali translation support. |
| 112 | - Fixed left frame mailbox list when sorting by case. |
| 113 | - Separated fortune plugin configuration variables from main plugin scripts. |
| 114 | See plugins/fortune/INSTALL. |
| 115 | - Fix for #906217 when checking spelling of inline replies, the corrected |
| 116 | words would appear through original email. |
| 117 | - Fixed empty information menu when viewing vCards without information |
| 118 | but name and e-mail address. |
| 119 | - User may now add an e-mail address when adding vCards without one to the |
| 120 | address book. No need to wait for the error message anymore. |
| 121 | - Removed japanese_xtra function used by older XTRA_CODE calls. Plugins |
| 122 | should use separate xtra_code functions. Older function does not provide |
| 123 | information about supported options. |
| 124 | - Added php-gettext classes (see class/l10n/*.php) and ngettext support |
| 125 | functions (provides fix for #1019007). |
| 126 | - LC_NUMERIC locale is set to C. (workaround for #1027130). Some plugins |
| 127 | might use decimal delimiters incorrectly. |
| 128 | - Added sq_is8bit function that can be used to detect 8bit strings. |
| 129 | - Added sq_mb_list_encodings function that provides list of encodings supported |
| 130 | by php mbstring module. |
| 131 | - Added Content-Transfer-Encoding: 8bit header for read receipts that contain |
| 132 | 8bit symbols. (provides fix for #934033). |
| 133 | - Fixed decoding function problems when mbstring.func_override has MB_OVERLOAD_REGEX |
| 134 | enabled. |
| 135 | - Fixed XSS exploit in decodeHeader function. |
| 136 | - Added site configuration and custom translation engine support to translate |
| 137 | plugin. |
| 138 | - Fixed SquirrelSpell error output. Patch courtesy David Boone. |
| 139 | - Fixed bug in IMAP read routines that treated "0" as false instead of |
| 140 | a string (patch courtesy Maurice Makaay). |
| 141 | - Fixed PHP notice when header property value is blank. |
| 142 | - Added compact paginator option. Patch by Felix Egli. |
| 143 | - Fixed reply/forward form in order to avoid warnings in SSL enabled sites. Patch |
| 144 | by Felix Egli. |
| 145 | - Removed command line option unsupported by qmail-inject in |
| 146 | class/deliver/Deliver_SendMail.class.php. Thanks to Ken Brush. |
| 147 | - Global file based address book is controled in configuration. Removed |
| 148 | global_file address book backend (use 'local_file' instead). |
| 149 | - Added Net-Style theme by Gabriele Maidecchi. Closes patch #1041323. |
| 150 | - Fix: Messages shown with bad times in message list due to misinterpreted |
| 151 | UW IMAP internal date. |
| 152 | - Fixed path used by random theme. |
| 153 | - Utf7-imap encoding/decoding functions will check, if required charset is |
| 154 | supported by mbstring and use it. Fixes bug #1005353. |
| 155 | - LDAP backend will use internal squirrelmail charset conversion functions |
| 156 | instead of php xml extension. Fixes bug #655137. |
| 157 | - Added Wood theme and Silver Steel theme by Pavel Spatny and Simple Green theme |
| 158 | - Fix two time zone calculation bugs, thanks to David White. Fixes #1063879. |
| 159 | - 'Priority' and 'Importance' headers are now also recognised, next to the |
| 160 | 'X-Priority' header that we've supported since a long time. Fixes #1039935. |
| 161 | - Handle a reload of the signout page gracefully: do not present an error |
| 162 | about having to be logged in to be able to sign out. Fixes #1070069. |
| 163 | - Prevent & being eaten in set_url_var, thanks Marcin Orlowski. Fixes #1053725. |
| 164 | - Removed internal_link hook. |
| 165 | - Added sq_setlocale function in order to use multiple locale names. |
| 166 | - Added size attributes to new_mail sound tags. Fixes #818958. |
| 167 | - Removed extra ; in SquirrelMail added Received header per RFC 822. Fixes #1088548. |
| 168 | - Add IMAP server type "hmailserver" to make search work with hMailServer. |
| 169 | Fixes #1085377. |
| 170 | |
| 171 | Version 1.5.0 |
| 172 | -------------------- |
| 173 | - Added new preference that determines cursor focus when replying |
| 174 | - Added support in conf.pl for MS cls command. |
| 175 | - conf.pl changes for relative paths outside the SM tree (#715119). |
| 176 | - conf.pl changes for delete_folder restrictions with Courier-IMAP and |
| 177 | UW-IMAP (#715550). |
| 178 | - Fixed code to allow for \ in password/username (#718116). |
| 179 | - Added mailto: support for Windows clients. See |
| 180 | contrib/squirrelmail.mailto.reg |
| 181 | - Added lowsrc to the list of attributes to be removed. |
| 182 | - Fixed message highlighting for To, CC and From and |
| 183 | for RFC1522 headers (bug #719564) |
| 184 | - Fixed incorrect folding inside message-id's |
| 185 | - Fix for Folders being listed in create/remove/rename operations |
| 186 | (#725443, #722823, #729225) |
| 187 | - Fix for bad attachment view link (#697381, #729295) |
| 188 | - Fix comp_in_new in search and addressbook not having right parameters (#731768). |
| 189 | - Fix max attachment filesize off by factor 10 when ini_var set in bytes (#730742). |
| 190 | - Fix for parsing fetch results. We are now able to extract the UID if it's |
| 191 | returned after the header. |
| 192 | - Remove obsoleted parsing functions. |
| 193 | - Fixed language bug in posting on modifying/deleting servers on mail_fetch plugin |
| 194 | (#742705). |
| 195 | - Fixed infinite loop in parseAddress on invalid mailaddress (#742584). |
| 196 | - Rewrote ugly "Not a very useful errormessage" to something more friendly. |
| 197 | - Make central function for compose links to make sure compose_in_new always |
| 198 | works the same way. |
| 199 | - Fix that when JavaScript off, compose in new was broken (#749654). |
| 200 | - Do not output JavaScript functions in page_header when JavaScript off. |
| 201 | - Support MS Exchange "DOMAIN/username/mailbox"-style usernames (#745814). |
| 202 | - Do not set Full Name to empty when edit_identity is false and edit_name is true (#750728). |
| 203 | - Added koi8-u, windows-1255, windows-1256, iso-8859-6 charset decoding support. |
| 204 | - Rewrite of sqimap_read_data_list which as result we better handle the |
| 205 | returned imap responses and we display error messages when connections are |
| 206 | dropped. |
| 207 | - Rewrite of email address parser and solve the infinite loops issues due to |
| 208 | bad formatted addresses. |
| 209 | - Modified conf.pl: default to force usernames lowercase for servers which |
| 210 | are case-insensitive. |
| 211 | - Applied bugfixes from stable to htmlfilter code. |
| 212 | - Fix bug #722933 where resuming a draft message would lose the reference headers. |
| 213 | - Removed hard coded colors from login.php and made it use the default theme and css file |
| 214 | - Fix that sending of read receipts failed when JavaScript on and comp in new off (#738130). |
| 215 | - Replaced search with new version by Alex Lemaresquier. (Originally |
| 216 | "asearch" plugin). |
| 217 | - New debugging function: sm_print_r() in strings.php. |
| 218 | - Use SM_PATH in config_default. Change default server type to 'other' instead |
| 219 | of cyrus. (#766577). |
| 220 | - Added feature to allow user to switch on full date display in mailboxes instead |
| 221 | of just partial date/time based on time of email and current date. |
| 222 | - Fixed bug that would cause e-mails dated in the future to be displayed with only |
| 223 | the time. |
| 224 | - Fixed unseen/total notifications to return behaviour back to 1.2.x style. |
| 225 | - Added 4 hooks (internal_link, mailbox_display_buttons, move_messages_button_action, create_collapse_link) |
| 226 | - Fix SquirrelSpell JS problem with other plugins that use forms (ie Menu Buttons). |
| 227 | - Fix when forwarding messages as attachment from message list, the displayed subject |
| 228 | was wrong (appearing to the user that the wrong messages were attached). |
| 229 | Closes #772371. |
| 230 | - Fix that when user has no theme preference set, Alien Glow would be selected under |
| 231 | display preferences in stead of Default. |
| 232 | - Updated 'action' to be 'smaction' so that plugins can modify the submit/action of |
| 233 | forms. This was suggested for the gpg plugin, but might be useful elsewhere. |
| 234 | - Add support for Mail-Followup-To header. |
| 235 | - Add a confirmation for the user that their mail has been sent. |
| 236 | - Fixed issue with forwarding emails having a ) appended to the end. |
| 237 | - Add "attachments_bottom" hook to allow manipulating/adding to the attachments |
| 238 | - Fix to prevent username & password from being displayed in error messages |
| 239 | if IMAP connection dropped during login |
| 240 | - Modified preference loading code to always have a complete $color array |
| 241 | set in case a user uses an incomplete theme. |
| 242 | - new function sqimap_msgs_list_move() to replace sqimap_msgs_list_copy() |
| 243 | - sqimap_msgs_list_copy() no longer deletes messages copied. |
| 244 | - Workaround for Mozilla bug #200412 in order to show multipart/related html mail. |
| 245 | - Fix for disapearing '0' from decoded strings (bug #784193) |
| 246 | - Replace all session_start() calls with sqsession_is_active() to be compatible |
| 247 | with upcoming PHP 4.3.3. |
| 248 | - Encoding of Russian translation changed to utf-8. Lithuanian translation changed |
| 249 | to utf-8. Fix allows to use national letters in folder names correctly. |
| 250 | - Added "Bypass Trash" checkbox to folder index, used with the Delete |
| 251 | button. (update: This needs work and will be changed, possibly removed) |
| 252 | - Fixed a problem with delete_move_next and server thread-sorting. |
| 253 | - New hook function: boolean_hook_function() Used for true/false hooks. |
| 254 | - Calendar plugin: in month view, display events on the same day sorted by time, |
| 255 | and include the time of the event in its tooltip. |
| 256 | - Added default settings for Mercury/32 to conf.pl. |
| 257 | - Fix to prevent mailboxes are deleted in selected stage which is against |
| 258 | RFC3501. |
| 259 | - Fix reply all address string in case the personal name contained a comma |
| 260 | (address separator). |
| 261 | - Added SASL PLAIN to IMAP and SMTP. Thanks to avel for the prodding and |
| 262 | code snippet. |
| 263 | - conf.pl will no longer offer to detect login methods if TLS is enabled. |
| 264 | - conf.pl no longer offers UID support toggle, which is forced true in |
| 265 | global.php |
| 266 | - HTML Filter bugfixes and further strengthening in response to some |
| 267 | findings reported by stardust. |
| 268 | - Disabled Vietnamese and Ukrainian translations. They are done in different |
| 269 | language. |
| 270 | - Removed all translations. SquirrelMail translations are distributed as |
| 271 | separate packages and kept in different cvs module. |
| 272 | - New function: imap_general.php:create_imap_stream() |
| 273 | - Updated src/login.php to detect, handle, and warn on LOGINDISABLED from IMAP server. |
| 274 | - Fixed SquirrelMail to work under PHP5. |
| 275 | - Reintroduce alternating row colors in addressbook, something that has |
| 276 | accidentally disappeared in the past. |
| 277 | - Disabled Quick-email-reporting feature in spamcop plugin. Bug.809452. Admin |
| 278 | can enable it by setting variable in plugins/spamcop/setup.php |
| 279 | - Fix again for Internet Explorer's stupidity of decoding characters, then |
| 280 | executing it blindly. See http://www.securityfocus.com/archive/1/340118. |
| 281 | - Replaced obsolete 2mbit.com RBL with ahbl.org RBL. Bug.No.829887 |
| 282 | - Added a sitewide override for authenticated SMTP - see authentication.txt. |
| 283 | - Fixed sorting of sent_subfolders. |
| 284 | Sent_subfolder plugin is hooked to special_mailbox hook. |
| 285 | - Integration of delete_move_next plugin into core. |
| 286 | - Compression of buttons/headers for message index and message body |
| 287 | - New option to save replies in the same folder as the original message. |
| 288 | |
| 289 | |
| 290 | ************************************** |
| 291 | *** SquirrelMail Stable Series 1.4 *** |
| 292 | ************************************** |
| 293 | |
| 294 | Version 1.4.0 -- 3 April 2003 |
| 295 | ----------------------------- |
| 296 | - Fixed mail_fetch plugin. Now folder edition defaults to actual value. |
| 297 | All settings from other servers are preserved when deleting one. |
| 298 | - Added Vietnamese translation. |
| 299 | - Fixed the newmail plugin. |
| 300 | - Added RECENT response to sqimap_get_status. |
| 301 | - Fixed attachment filename resolving. |
| 302 | - Added check for X-Confirm-Reading-To to make MDN work for messages sent by Pine. |
| 303 | - sqextractGlobalVar removed (use sqgetGlobalVar instead). |
| 304 | - Subfolders of Sent and Drafts show To field instead of From |
| 305 | - Updates in conf.pl to infamous delete_folder setting, including |
| 306 | addition of appropriate default value for courier and UW. |
| 307 | - Fix for date/time display in certain timezones. |
| 308 | - Fix some features of login.php that are used by some plugins and was broken |
| 309 | by register_globals = off. |
| 310 | - Added Greek locale. Thanks to George P. Kremmydas |
| 311 | <george at kefalonia-ithaki.gr> and Alexandros Vellis <avel at noc.uoa.gr> |
| 312 | - Added notes about PHP 4.3.x to documentation. |
| 313 | - Fixed \Noselect mailbox detection. |
| 314 | - Fixed charset decode of base64 encoded strings. |
| 315 | - Fixed encoding of email addresses in our composed messages. |
| 316 | - Fixed folder creation for Courier using Autoconfig options. |
| 317 | - Fixed encoded string handling inside MDN notifications. |
| 318 | - Fixed unfold header routine in imap_messages (for mailbox_display). |
| 319 | - Fixed subject_line hook. |
| 320 | - Fixed sqgetGlobalVar switching. |
| 321 | - Fixed handling of encoding/decoding strings. |
| 322 | - Fixed wrong array_slice call for a subset of the headers. |
| 323 | - Allow encoded personal names in compose.php. |
| 324 | - Improved address parsing of addresses coming from the compose form. |
| 325 | - Fixed uninitialized indices when parsing attachments. |
| 326 | - Support text/directory MIME-type for vCards (RFC 2425). |
| 327 | - Added Arabic locale. Thanks to Asrar Abbasi <asrar at canasoft.net> and |
| 328 | Naveed Saqib <naveed.saqib at biznas.com>. |
| 329 | - Update required PHP version in documentation to 4.0.6. |
| 330 | - Fixed delete_move_next plugin to remember where it moved mail to. |
| 331 | - Fixed compose to remember attachments. |
| 332 | - Fixed possible XSS in compose when replying to malicious sources. |
| 333 | - Add display of the maximum filesize for attachment uploads. |
| 334 | - Do not add < and > if an identity doesn't contain a full name. |
| 335 | - Fixed bug in parsing Content-Type properties part. |
| 336 | - Added move_before_move hook to allow plugins to act upon the different buttons |
| 337 | - Fixed bug in Forwarding of Emails (move_messages.php) |
| 338 | - Fixed variable spelling error in filters.php |
| 339 | - Fixed some operator bugs in compose.php, move_messages.php, and spamcop.php |
| 340 | |
| 341 | Version 1.4.0 RC 2a |
| 342 | ------------------- |
| 343 | - Fix broken themes box in display options. |
| 344 | - Massive overhaul of administrator plugin. |
| 345 | - Added new function sqgetGlobalVar to global.php to provide direct access |
| 346 | to variables in $_GET, $_POST, $_SESSION, $_COOKIE and $_SERVER. |
| 347 | - Patch from O'Shaughnessy Evans <shaug-sqm@wumpus.org> to allow disabled $org_logo |
| 348 | - Lots of language/internationalization updates |
| 349 | - conf.pl fixes for certain uses of SM_PATH, esp. $signout_page. |
| 350 | - SMTP & IMAP auth method "plain" was a misnomer - now corrected to |
| 351 | the more accurate name "login" (Plain to be implemented soon). |
| 352 | - Fix for compose after search bug. (Closes #662346) |
| 353 | - Improved error reporting when sending mail with SMTP. |
| 354 | - Changed SquirrelMail identification to use User-Agent instead of X-Mailer. |
| 355 | - Prevent endless loop when timezone config is not found. Thanks Joshua Colson. |
| 356 | - Fix IMAP error when returning to message from viewing image attachment. |
| 357 | - Do more trimming to indented subjects in threadview so they don't wrap. |
| 358 | - Trash folder now displays purge link in all cases. (Closes #655943) |
| 359 | - Fix typo in delete_move_next plugin which caused php file-handle errors. |
| 360 | - Make vCard more liberal in what it accepts (thanks Kurt Pires). |
| 361 | - Fix problem with subject encoding when using Japanse. |
| 362 | - Move login_form hook to be actually in the login form. |
| 363 | - Fix message_details plugin ability to save a raw message. |
| 364 | - Try better to get the filename of an attachment. |
| 365 | - Deliver_SMTP class now uses HTTP_HOST in SMTP HELO. Should fix DNS |
| 366 | issues some people have reported. (Closes #560524) |
| 367 | - Obsolete sqm_topdir(), which caused login trouble with installs that |
| 368 | have open_basedir restrictions. Thanks Jimmy Connor. |
| 369 | - Fix broken abook_take plugin. |
| 370 | - Fix HTML errors that caused display problems in NS4. |
| 371 | - Correctly fold encoded header lines. |
| 372 | - Fix prefs caching not working correctly in PHP 4.3 caused by a stupid |
| 373 | version checking mechanism. |
| 374 | - Fix XSS hole that allowed JavaScript execution by sending someone |
| 375 | an email with specially crafted headers. Thanks Jason Munro, and |
| 376 | Masato Higashiyama. |
| 377 | |
| 378 | |
| 379 | Version 1.4.0 RC 1 |
| 380 | ------------------ |
| 381 | - Change the way highlighting rules are stored to make them more reliable and |
| 382 | easier to manage. |
| 383 | - Reorganization of conf.pl, menu #2 |
| 384 | - Added CRAM-MD5 and DIGEST-MD5 authentication support for IMAP and SMTP |
| 385 | - Experimental TLS support for IMAP and SMTP (requires PHP 4.3.x) |
| 386 | - Override settings with config_local.php |
| 387 | - Compose form no longer shows attachment options if php file_uploads |
| 388 | disabled |
| 389 | - Improved bodystructure parsing. |
| 390 | - Support for windows-1257 charset. |
| 391 | - Optimizations to the number of IMAP calls. |
| 392 | - Fix problem with IE6 + iso-8859-13. |
| 393 | - Allow Mail Fetch to use a different POP3 server port number. |
| 394 | - Force magic_quotes_runtime to be off to avoid problems with this setting. |
| 395 | - Introduce check_sm_version function for plugins wanting to know |
| 396 | which version of SquirrelMail this is. |
| 397 | - Configurable session name to avoid conflicts with other PHP applications. |
| 398 | - Miscellaneous fixes for systems with error_reporting set to E_ALL. |
| 399 | - Many many other bugfixes and tweaks! |
| 400 | |
| 401 | |
| 402 | ************************************* |
| 403 | *** SquirrelMail Devel Series 1.3 *** |
| 404 | ************************************* |
| 405 | |
| 406 | |
| 407 | Version 1.3.2 |
| 408 | ------------- |
| 409 | - Rewrite of message delivery related functions. |
| 410 | - User interface modifications. |
| 411 | - Added Japanese support thanks to Masato HIGASHIYAMA <masato@yamaai-tech.com> |
| 412 | - Remove NOOP checks in the POP3 client of mail_fetch to make things more |
| 413 | compatible and not break things which don't need to be broken. |
| 414 | - Fix src directory being moved on Windows systems, bugs #586518 #605256 #610676. |
| 415 | - This release is compatible with installations that have register_globals set to off. |
| 416 | - Do not lose user prefs/sigs/abooks when trying to save to a full disk. |
| 417 | - Make the SquirrelMail link on the right top configurable so a provider can point |
| 418 | to their own FAQ for example. |
| 419 | - Enable TZ in safe_mode if safe_mode_allowed_env_vars permits this bug #612148. |
| 420 | - Fix some bugs in folder management (create, delete,...) and add enhancements. |
| 421 | |
| 422 | Version 1.3.1 |
| 423 | ------------- |
| 424 | - lots of fixes by Marc, including #596781 and #596930 |
| 425 | |
| 426 | Version 1.3.0 |
| 427 | ------------- |
| 428 | - allow_call_time_by_reference=off fixes. |
| 429 | - Added forward as attachment in read_body. |
| 430 | - Better clean-up of left attachments at login. |
| 431 | - Restore compose sessions in case of a expired session. |
| 432 | - Added "Display Message" / "Up" links in read_body to navigate in messages with |
| 433 | attached messages (message/rfc822). |
| 434 | - Don't activate the Send Receipt link when the folder is the Sent folder. |
| 435 | - Moved view_header code out of read_body.php and put it in view_header.php. |
| 436 | - Open message/rfc822 attachments in read_body what makes it possible to |
| 437 | reply to attached messages. |
| 438 | - Rewrite of the newMail function in compose.php. This simplifies the |
| 439 | interface between read_body.php and compose.php. |
| 440 | - Moved compose related code from read_body to compose. |
| 441 | - Rewrite of mailbox-display to make it more modular (we use it in search.php). |
| 442 | - Added support for displaying multiple entities. |
| 443 | - Changed finding display entities. |
| 444 | - Extract disposition and xmailer header information in the headerparser |
| 445 | instead of request them individualy by an imap-call. |
| 446 | - Store message objects in the current session. This saves a lot of imap-calls. |
| 447 | - Added UID support. |
| 448 | - Store addresses in an object instead of a string. |
| 449 | - Rewrite of the bodystructureparser function. Now the message object contains |
| 450 | all described parameters in RFC2060. |
| 451 | - Introduction of the mime class where all mime related functions are situated |
| 452 | - Fixed removing MDN attachments. |
| 453 | - Fixed MDN problems with js confirmbox. |
| 454 | - Speedimprovements in case we download mime-entities. |
| 455 | - Added possibility to extract message/rfc822 attachments and store them as |
| 456 | the original message in a folder. |
| 457 | - Right to left languages implementation initiated |
| 458 | - Enable people with file_uploads = off to still send mail. Patch from Seth |
| 459 | E. Randall. |
| 460 | - Moved the generic_header hook back to page_header.php. bug #554278 |
| 461 | - Make default theme work. Bug #557313, thanks Tyler Bannister. |
| 462 | |
| 463 | |
| 464 | Version 1.2.7 -- June 21 2002 |
| 465 | ----------------------------- |
| 466 | - fix for 'compose as new' link. bug #554886 |
| 467 | - fix charset format in the admin plugin. bug #550725 |
| 468 | - fix for errant '.' in default_folder_prefix. bug #551310 |
| 469 | - fix for folder names with '?' and '*'. bug # 559257, #552180 |
| 470 | - added the ability to search without the charset argument. #552288 |
| 471 | - Made /noselect node display optional. bug #554988, patch #452178 |
| 472 | - Improved support for macosx IMAP server thanks Brian Haun |
| 473 | - Added macosx friendly search, thanks Brian Haun bug #553038 |
| 474 | - Fixed word wrap problems when sending mail. bug #552961, #556143 |
| 475 | - Added possibility to use multiple compose windows without loss |
| 476 | of attachements. |
| 477 | - Fixed forward message/rfc822 attachments from a search |
| 478 | - Fix SpamCop plugin. |
| 479 | - Fixed send MDN link. |
| 480 | - Fixed dealing with \r\n and \n in smtp.php. |
| 481 | - Fixed to, cc, bcc arrays in message->header |
| 482 | - Speed optimizements in generating message-lists. |
| 483 | - Fixed loss of attachment with html addressbook. |
| 484 | - Fixed saving drafts with attachments |
| 485 | |
| 486 | Version 1.2.6 -- April 29 2002 |
| 487 | ------------------------------ |
| 488 | - A complete MagicHTML rewrite since the existing codebase was |
| 489 | causing too many XSS problems. Hopefully now Nick Cleaton will |
| 490 | leave us alone. :) Testing credits go to Nick. |
| 491 | - Fix for cross-site scripting vulnerability (bug #545933) |
| 492 | Reported by Nick Cleaton. |
| 493 | - Changing "emtpy" to "purge" for more clarity. |
| 494 | - Fix for cross-site scripting vulnerability (bug #544658) |
| 495 | Reported by Nick Cleaton. |
| 496 | - Fix for incorrect word wrap in Opera (bug #495073) |
| 497 | - Workaround for older prefs: some of them contain "None" for |
| 498 | left_refresh (bug #540108) |
| 499 | - Fix for entities in cc and bcc fields on message display (bug #522493) |
| 500 | - Fixes for quoted values in the addressbook by David Rees (bug #538389) |
| 501 | - Fixed src/src problem (bug #538803) |
| 502 | - Fixed so non-ascii searches no longer fail both when searching |
| 503 | and when applying filters (bug #520918) |
| 504 | - Added POP3 Before SMTP option (feature request: #498428) |
| 505 | - Added a server-side thread sorting option per folder |
| 506 | - Added a server-side sorting global option |
| 507 | - Compose in new window size can be set in Display prefs. |
| 508 | - Logout error system unified. |
| 509 | - Fix for a "theme passed as cookie" exploit. |
| 510 | - PostgreSQL is now supported for database backed use |
| 511 | - Added user option to sort messages by internal date |
| 512 | - Changed attachment handling now attachments are adressed to |
| 513 | unique compose session. |
| 514 | - Added forward messages as message/rfc822 attachment |
| 515 | - Fixed handling message/rfc822 attachments |
| 516 | - Fixed folder list display when special folders have subfolders |
| 517 | - Added option to auto-append sig before reply/forward text (523853) |
| 518 | - Fixed subfolders being "orphaned" when renaming parents (498167) |
| 519 | - Filters can be applied to only new mail. |
| 520 | - Filters are updated when renaming/deleting folders (512056) |
| 521 | - Filtering now happens on login (filters plugin) |
| 522 | - Added option for WIDTH and HEIGHT tags to Org. Logo. (patch #412754) |
| 523 | - Fixed resume draft bug #513521, #514639 |
| 524 | - Newmail plugin: admin can disable the use of audio (patch #517698) |
| 525 | - Fixed quoting problem in safe html (patch #516542) |
| 526 | - SPAM folder no longer special folder (filters plugin) |
| 527 | - Filtering now happens on folder list refresh (filters plugin) |
| 528 | - Added checking of input of the folders page |
| 529 | - Made erronous deleting of folders harder (patch #514208) |
| 530 | - Made SquirrelMail display \Noselect nodes in Cyrus also made it |
| 531 | impossible to try to delete \Noselect nodes. (patch #452178) |
| 532 | - SquirrelSpell version 0.3.8 -- pretty configuration error reporting |
| 533 | added by popular demand. |
| 534 | - Improved the handling of IMAP [PARSE] messages to reduce retrieval error. |
| 535 | - Fixed small bug in handeling timezone (bug #536149). |
| 536 | - MDN message now RFC compatible (bug #537662). |
| 537 | - Fixed html tables in printer_friendly_bottom.php (patch #542367), and |
| 538 | make it so that printer friendly uses black-on-white colors in stead |
| 539 | of the theme colors. |
| 540 | - Fixed return address of MDN receipts when having multiple identities |
| 541 | (patch #530139). |
| 542 | |
| 543 | Version 1.2.5 -- 22 February 2002 |
| 544 | --------------------------------- |
| 545 | - Multiple mailbox list calls cached. |
| 546 | - Added 'View unsafe images' link to the bottom of pages which contain |
| 547 | unsafe images. |
| 548 | - Fixed 'too many close table tags' and various other issues |
| 549 | which meant SM output didn't always validate as clean HTML. |
| 550 | - Added the ability to add special folders through plugins. |
| 551 | - Added an Always compose in a pop-up window option. |
| 552 | - Search page update with ability to save searches and search |
| 553 | all folders at once. |
| 554 | - Made searching on multiple criteria possible, with thanks to Jason Munro |
| 555 | - Fixed 'list all' in addressbook (#506624, thanks to Kurt Yoder) |
| 556 | - Fixed small bugs in db_prefs |
| 557 | - Allowed SquirrelMail to work from within a frame, eg. not using _top |
| 558 | this is configureable. (thanks to Simon Dick) |
| 559 | - Added options to conf.pl to enable automated plugin installation: |
| 560 | ./conf.pl --install-plugin <pluginname>. This allows plugins to be |
| 561 | distributed in packages. Conf.pl now also reports when saving fails. |
| 562 | - Attachment hooks now also allow specification of generic rules like |
| 563 | text/* which will be used when no specific rule is available. |
| 564 | - conf.pl can now configure database backed address books and |
| 565 | preferences. |
| 566 | - Version 0.3.7 of SquirrelSpell. Fixes a potential privacy |
| 567 | vulnerability (symlink attack), plus introduces formatting fixes |
| 568 | and javadoc-style comments. |
| 569 | - Bugfix in mailfetch reported by Mateusz Mazur |
| 570 | - Administrator plugin. A web based conf.pl replacement. |
| 571 | - Removed GLOBALS from conf.pl |
| 572 | - HTML messages optimization. |
| 573 | - Added support for requesting read receipts (MDN) and delivery receipts. |
| 574 | - Added the ability to stop users changing their names and email addresses. |
| 575 | - Added signature into multiple identities (Stefan Meier <Stefan.Meier@cimsource.com>) |
| 576 | - Updated user help files to reflect UI chanegs and added functionality. |
| 577 | |
| 578 | Version 1.2.4 -- 25 January 2002 |
| 579 | -------------------------------- |
| 580 | - Fixes a nasty remote arbitrary command execution vulnerability |
| 581 | in the spellchecker plugin. |
| 582 | |
| 583 | Version 1.2.3 -- 21 January 2002 |
| 584 | -------------------------------- |
| 585 | - Fixed focus system on pages that contain forms. |
| 586 | - Fixed IMAP code to send different command identifiers as per |
| 587 | section 2.2.1 of RFC 2060. |
| 588 | - Fixed 'sticky priority' so that replies are set to the same |
| 589 | priority as the original message. |
| 590 | - Fixed Printer Friendly to print HTML messages. |
| 591 | - Fixed multiple receivers in Sent mailbox (#500910). |
| 592 | - Disabled prefs caching under PHP 4.1 |
| 593 | - Added "Search Memory". Enabling to store up to |
| 594 | 9 predefined searchs. |
| 595 | - Increased security in html message. |
| 596 | - Added the possibility to specify system-defined css in order to |
| 597 | allow users to change the font family and size of SM. Making possible to |
| 598 | make it bigger or smaller depending on their screen size. Sysops may add |
| 599 | or remove these system-defined css located in themes/css/ |
| 600 | - Fixed a bug appearing on some apache virtual hosts |
| 601 | - Fixed javascript error (#505255) |
| 602 | - Fixed the db_prefs so they work again (#499609, thanks to Simon Dick) |
| 603 | |
| 604 | Version 1.2.2 -- 1 January 2002 |
| 605 | ------------------------------- |
| 606 | |
| 607 | - Fixed an infinite loop in printer friendly when wrapping option |
| 608 | is not in the prefs. |
| 609 | Bug reported by Boris Manojlovic <steki@verat.net> |
| 610 | - Html cleanup, with patch from Dave Huang (#496712) |
| 611 | - Fixed a problem saving prefs when using PHP 4.1 |
| 612 | - Russian, Thai, Swedish, Dutch and French update. |
| 613 | - Changed configure invocation from bash to sh. (Bug #496752) |
| 614 | - Changed conf.pl invocation from '#!/usr/bin/perl' to |
| 615 | '#!/usr/bin/env perl' to help people who have perl somewhere |
| 616 | else. (Bug #496753) |
| 617 | - Fixed sorting of folder list, bug #497181 |
| 618 | - Fixed wrong behavior of non-javascript select all, bug #496681 |
| 619 | - Added "Show Pages" link to message list showing all messages |
| 620 | (the resultant page of clicking "Show All") |
| 621 | - i18n Fix. Because of different configurations in the gettext system, |
| 622 | some installations could not manage correctly SM languages other than |
| 623 | English. This has been corrected. |
| 624 | - Miscellaneous rewrites and improvements. |
| 625 | - Moved locale files into the ISO-conformant directories. |
| 626 | - Moved help files into the ISO-conformant directories. |
| 627 | - Moved compilepo and mergepo files from locale/ into po/ |
| 628 | - Slight i18n fixes and rewrites to accommodate for moved files. |
| 629 | - Fixes for entities in the subject when replying. |
| 630 | - Fixes for entities in the To: header. (Bug #489365) |
| 631 | - Fix for incorrect javascript prefs handling (Bug #497688) |
| 632 | - Added color 15 for themes to separate background and foreground colors. |
| 633 | - Added several new themes. |
| 634 | |
| 635 | Version 1.2.1 -- 25 December 2001 |
| 636 | --------------------------------- |
| 637 | |
| 638 | - Fixed the bug that kept the create, delete, and rename sections |
| 639 | from appearing in the folders page (#496604) |
| 640 | - Fixed the motd bug not allowing ' (#496616) |
| 641 | - Sorting of addressbook_search fixed, thanks to the patch of |
| 642 | Cor Bosman (xs4all) |
| 643 | |
| 644 | Version 1.2.0 -- 25 December 2001 |
| 645 | --------------------------------- |
| 646 | |
| 647 | - Collapsible Folders |
| 648 | - The Paginator!!! |
| 649 | - Hundreds of UI Tweaks |
| 650 | - Message Drafts |
| 651 | - Rewrite of much of the options pages |
| 652 | - Multiple identities |
| 653 | - Reply Citations |
| 654 | - Better Attachment Handling |
| 655 | - Integration of Several Plugins into Core Code (including xmailer, |
| 656 | attachment_common, paginator, priority, printer_friendly, sqclock) |
| 657 | - Ability to mark messages as Read/Unread |
| 658 | - New themes (including a Christmas theme, and several changing themes) |
| 659 | - Rewrite of much of the options pages code |
| 660 | - Improved support for newer versions of PHP |
| 661 | - Message lists can be shown with alternating colors for easier reading |
| 662 | - Can include/exclude yourself when using the "Reply All" |
| 663 | - Message highlighting comes with dozens more easily accessable colors. |
| 664 | - Option to set the "Priority" of the message(Normal/High/Low) |
| 665 | - Now able to show all messages of an inbox at the same time. |
| 666 | - Cleanup of the paginator code, improving display style |
| 667 | - Cleanup of configuration file code, a bit |
| 668 | - Introduction of sent_subfolders plugin as Official Plugin |
| 669 | - Bugfixes..and more Bugfixes! |
| 670 | |
| 671 | |
| 672 | *************************************************************** |
| 673 | *** Squirrelmail Development Series 1.1 and 1.1 Pre-Releases *** |
| 674 | **************************************************************** |
| 675 | |
| 676 | Version 1.2.0-rc3 -- 2 December 2001 |
| 677 | ------------------------------------ |
| 678 | - Speed improvements and optimizations on much of the code |
| 679 | - Comments added, formatting cleaned up for much of the code |
| 680 | - Several plugins integrated into the Squirrelmail core |
| 681 | (focus change, attachment common, printer friendly, etc) |
| 682 | - Several plugins added as "Official Plugins" to the main |
| 683 | Squirrelmail distribution |
| 684 | - First half of a rewrite of the option pages code |
| 685 | - The Paginator!!! |
| 686 | - Other stuff that I don't recall (developers, please fill this in!) |
| 687 | |
| 688 | Version 1.1.3 -- (never really released) |
| 689 | ---------------------------------------- |
| 690 | - Added major speed improvements to IMAP functions by our |
| 691 | friends at XS4ALL |
| 692 | - Fixed MOTD |
| 693 | - Fixed multipart/alternative messages |
| 694 | - Updated Dutch translation |
| 695 | - Added Indonesian translation |
| 696 | - Added Portuguese (Portugal) translation |
| 697 | - Added language aliasing |
| 698 | - Added Turkish translation |
| 699 | |
| 700 | Version 1.1.2 -- May 21, 2001 |
| 701 | ----------------------------- |
| 702 | - Many bugs squashed |
| 703 | - Several UI tweaks and improvements |
| 704 | - Added option (3 -> 14 in conf.pl) to auto create sent and trash folders. |
| 705 | - Updated Czech translation |
| 706 | - Support for multiple identities |
| 707 | - Support for Russian Apache removed. It is now deemed easier to just |
| 708 | turn off Charset Recoding in the Russian Apache config. See the file |
| 709 | doc/README.russian_apache |
| 710 | |
| 711 | Version 1.1.1 -- April 30, 2001 |
| 712 | ------------------------------- |
| 713 | - Added built-in support for gettext if compiled support isn't available |
| 714 | - Made validate.php include a few more standard things |
| 715 | - Corrected a bug when sending an email properly |
| 716 | |
| 717 | Version 1.1.0 -- April 21, 2000 |
| 718 | ------------------------------- |
| 719 | - Added option to have signout page redirect to another page (patch from |
| 720 | Scott Bronson) This can be configured in conf.pl (Org Prefs) |
| 721 | - Much improved SMTP error handling (patch from Jeff Evans) |
| 722 | - Preferences are now cached instead of read in every page load. |
| 723 | - Improved URL parser |
| 724 | - Added ability to read HTML messages by default instead of plain text |
| 725 | (Display Options) |
| 726 | - Added authenticated SMTP server support (configure in conf.pl) |
| 727 | - Rewrote attachment handling code in compose.php |
| 728 | - If aliases are typed in To, Cc, or Bcc, they are automatically looked up |
| 729 | in the addressbook and converted to the associated addresses. |
| 730 | - Added collapseable folder listing (an option that can be turned on in |
| 731 | Folder Options) |
| 732 | - Added alternating row colors to improve interface (Display Options) |
| 733 | |
| 734 | |
| 735 | ************************************** |
| 736 | *** Squirrelmail Stable Series 1.0 *** |
| 737 | ************************************** |
| 738 | |
| 739 | Version 1.0.6 -- April 19, 2001 |
| 740 | ------------------------------- |
| 741 | - Reworked validation for each page. It's now standardized in validate.php |
| 742 | - Fixed login bug that resulted from 1.0.5 security updates |
| 743 | - Fixed plugin incompatibilities that were introduced in 1.0.5 |
| 744 | - Added more security checking to preference saving/loading |
| 745 | - Updated German translation (thanks to Ronald Bauerschmidt <rb@debian.org>) |
| 746 | - Updated Finnish help files |
| 747 | |
| 748 | Version 1.0.5 -- April 17, 2001 |
| 749 | ------------------------------- |
| 750 | - MAJOR security issues addressed. Please upgrade as soon as possible. |
| 751 | - Downloading attachments should work better due to a tip by Ray Black III. |
| 752 | - Fixed bug with drop-down folder list not containing INBOX |
| 753 | - Added Swedish help files Teemu Junnila <teejun@vallcom.com> |
| 754 | - Added Italian help files Antonetti Roberto <antonr@piceniaweb.com> |
| 755 | |
| 756 | Version 1.0.4 -- April 9, 2001 |
| 757 | ------------------------------ |
| 758 | - Fixed some bugs with folder creation |
| 759 | - Security fix for UW IMAP server to disallow folder paths outside of |
| 760 | $folder_prefix |
| 761 | - Some problems with header encoding/decoding fixed |
| 762 | - Made subject column take up whatever width is available |
| 763 | - Added bcc to html addressbook search |
| 764 | |
| 765 | Version 1.0.3 -- March 9, 2001 |
| 766 | ------------------------------ |
| 767 | - Many i18n enhancements/fixes |
| 768 | - Fixed bug with default theme path being set incorrectly |
| 769 | - Fixed problem when sending/forwarding multiple attachments |
| 770 | - Made folder drop-down list consistant in look to the other drop-downs |
| 771 | - Fixed problem where some attachment filenames would not be displayed |
| 772 | - Added Finnish help files by Teemu Junnila <teejun@vallcom.com> |
| 773 | - Updated Norwegian translation |
| 774 | - Updated Brazillian Portuguise translation |
| 775 | |
| 776 | Version 1.0.2 -- February 8, 2001 |
| 777 | --------------------------------- |
| 778 | - Added a workaround for RedHat's 4.0.4pl1-3 binary package (It's also |
| 779 | the same workaround for Konqueror and other PHP installations?) |
| 780 | - Select All works through the search |
| 781 | - Better escaped string handling from POST variables |
| 782 | - Many more code cleanups and optimizations |
| 783 | - Added Hungarian translation by Teemu Junnila <teejun@vallcom.com> |
| 784 |