XSS fixes

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9615 7612ce4b-ef26-0410-bec9-ea0150e637f0

Fix serveral cross site scripting bugs found by Martijn Brinkers and
ourselves. Part 1/2, patch to magicHTML will follow. This is CAN-2005-1769.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9610 7612ce4b-ef26-0410-bec9-ea0150e637f0

Argh, didn't re-read my own text..

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9607 7612ce4b-ef26-0410-bec9-ea0150e637f0

add security considerations to plugins.txt

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9604 7612ce4b-ef26-0410-bec9-ea0150e637f0

Disable access to the administrator plugin when plugin is disabled in config.
Stable team/Jon: can I commit this into stable aswell?

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9603 7612ce4b-ef26-0410-bec9-ea0150e637f0

Bug #1219184.

Identity code wasn't checking username for domain portion, if email address
was not set, it re-appended domain name to username.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9601 7612ce4b-ef26-0410-bec9-ea0150e637f0

updating list of translators. adding spacing between languages for better
readability

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9546 7612ce4b-ef26-0410-bec9-ea0150e637f0

typo. extra argument is used for color.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9523 7612ce4b-ef26-0410-bec9-ea0150e637f0

String fix

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9513 7612ce4b-ef26-0410-bec9-ea0150e637f0

HTML fix

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9507 7612ce4b-ef26-0410-bec9-ea0150e637f0

String fix and minor formatting

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9506 7612ce4b-ef26-0410-bec9-ea0150e637f0

Formatting and adding FIXME to addressbook.php

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9504 7612ce4b-ef26-0410-bec9-ea0150e637f0

String and phpDocumentor fix

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9502 7612ce4b-ef26-0410-bec9-ea0150e637f0

Formatting and changing URI

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9499 7612ce4b-ef26-0410-bec9-ea0150e637f0

Fix that addresses inconsistency in PHP's chunk_split; was breaking attachments.  Thanks to Roalt Zijlstra

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9495 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding info about other db extensions

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9493 7612ce4b-ef26-0410-bec9-ea0150e637f0

mhash is used for string hashing. crypto functions unrelated to charsets.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9492 7612ce4b-ef26-0410-bec9-ea0150e637f0

string typo

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9489 7612ce4b-ef26-0410-bec9-ea0150e637f0

todo about caching

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9486 7612ce4b-ef26-0410-bec9-ea0150e637f0

remove if(true)
indicate changes in 1.4.5cvs
add define in order to prevent loading errors in http://url/functions/imap_mailbox.php

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9485 7612ce4b-ef26-0410-bec9-ea0150e637f0

copy old plugins directory to new plugins directory is not good idea.
themes should be copied only when they are updated or missing

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9478 7612ce4b-ef26-0410-bec9-ea0150e637f0

i think, it is better that way.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9475 7612ce4b-ef26-0410-bec9-ea0150e637f0

information about id tags

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9474 7612ce4b-ef26-0410-bec9-ea0150e637f0

include_once instead of require_once.
subpackage tags in order to separate prefs functions and files in phpdoc

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9473 7612ce4b-ef26-0410-bec9-ea0150e637f0

moving search functions to separate section in phpdoc.
using include_once instead of require_once. files might be already loaded in validate.php

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9472 7612ce4b-ef26-0410-bec9-ea0150e637f0

function might be removed in 1.6.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9471 7612ce4b-ef26-0410-bec9-ea0150e637f0

documenting prefs functions

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9470 7612ce4b-ef26-0410-bec9-ea0150e637f0

documenting form functions.
adding id tag support to every function instead of using it only in main function.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9469 7612ce4b-ef26-0410-bec9-ea0150e637f0

added docs to fast. we now have separate cvs module for that.

cvs co documentation

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9468 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding sgml documents

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9464 7612ce4b-ef26-0410-bec9-ea0150e637f0

Add index.html to Development subdir, rename README.russian_apache to
russian_apache.txt (why doens't CVS support moves? we need svn!).

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9459 7612ce4b-ef26-0410-bec9-ea0150e637f0

changelog typo

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9458 7612ce4b-ef26-0410-bec9-ea0150e637f0

Move developer documentation to doc/Development

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9450 7612ce4b-ef26-0410-bec9-ea0150e637f0

drop any double spaces since these will be displayed in the title-attribute

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9449 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding information about shared openssl extension.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9447 7612ce4b-ef26-0410-bec9-ea0150e637f0

documenting some class params

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9445 7612ce4b-ef26-0410-bec9-ea0150e637f0

Initializing aHeaderFields to avoid notices

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9444 7612ce4b-ef26-0410-bec9-ea0150e637f0

content disposition rfc

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9443 7612ce4b-ef26-0410-bec9-ea0150e637f0

updating @since tags to indicate version in stable

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9442 7612ce4b-ef26-0410-bec9-ea0150e637f0

added urls of poppass servers and minimal required pear db version for peardb backend

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9441 7612ce4b-ef26-0410-bec9-ea0150e637f0

In devel the fix to identity.php automatically fixed the include_self_reply_all
bugs.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9439 7612ce4b-ef26-0410-bec9-ea0150e637f0

using squirrelmail functions instead of working with $_SESSION directly

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9438 7612ce4b-ef26-0410-bec9-ea0150e637f0

Fix get_identities() for the case where the user has not set an email
address: use the fallback $username@$domain that's used in compose aswell.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9437 7612ce4b-ef26-0410-bec9-ea0150e637f0

Handle missing flags column (in broken messages) a bit more gracefully
(ie without php-warnings).

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9436 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding index files in order to prevent directory listing.
adding some phpdoc blocks to mime classes.
tagging possible programming errors

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9434 7612ce4b-ef26-0410-bec9-ea0150e637f0

Gracefully recover from over quota error while sending a mail (#1145144):
when an quota error occurs we can't redirect properly ("Warning: headers
already sent"), so provide a link to the redirected page instead.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9433 7612ce4b-ef26-0410-bec9-ea0150e637f0

Fix typo "." instead of ";". selopts[-1] was concatenated with the string.
Initialize the array selopts.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9432 7612ce4b-ef26-0410-bec9-ea0150e637f0

Tweak IMAP connection error display (#1203154).

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9428 7612ce4b-ef26-0410-bec9-ea0150e637f0

fix php5 mistakes and remove disabled code. disabled code might be used to make sure
that list of dictionaries is correct, but it can delete old user's dictionaries.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9427 7612ce4b-ef26-0410-bec9-ea0150e637f0

confused original code with php5 fix

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9426 7612ce4b-ef26-0410-bec9-ea0150e637f0

information about added peardb backend

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9425 7612ce4b-ef26-0410-bec9-ea0150e637f0

information about peardb backend. capitalized php, crypto names and ldap.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9424 7612ce4b-ef26-0410-bec9-ea0150e637f0

information about imap preset changes

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9422 7612ce4b-ef26-0410-bec9-ea0150e637f0

updated mercury settings in order to remove INBOX. prefix in 4.0 version.
added description of dovecot preset.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9421 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding template strings and updating pot

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9419 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding missing options

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9418 7612ce4b-ef26-0410-bec9-ea0150e637f0

Restore folder list centering to the old situation (before 3 weeks ago).

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9417 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding one more change_password backend. similar to mysql one, but provides
more controls over backend SQL server and supports different password
schemas. Tested with dovecot-mysql. Might have to scrap some docs about it.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9414 7612ce4b-ef26-0410-bec9-ea0150e637f0

replacing skip_SM_header with two different options. If admins want to shoot
their own foot, they have to do that themselves and remove headers
completely by modifying SquirrelMail scripts.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9411 7612ce4b-ef26-0410-bec9-ea0150e637f0

provide failsafe language in case $sm_language is not set in accept_lang
and default language.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9410 7612ce4b-ef26-0410-bec9-ea0150e637f0

correctly check for messages in trash if the total is set, but is empty (since
that does not necessarily mean there aren't any messages in the trash..)

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9408 7612ce4b-ef26-0410-bec9-ea0150e637f0

add dovecot

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9407 7612ce4b-ef26-0410-bec9-ea0150e637f0

unneeded undercore in example

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9405 7612ce4b-ef26-0410-bec9-ea0150e637f0

information about sqspell changes

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9404 7612ce4b-ef26-0410-bec9-ea0150e637f0

Moved dictionaries and settings to SM prefs system
Fixed use of $SCRIPT_NAME globals
Removed SQSPELL_EREG setting. Internal dictionary format was changed, use
of ereg is unstable due to mbstring.fu*** :). It would be better to use
boolean configuration option.
Fixed use of php 4.1+ POST and GET vars
Fixed some script errors that might appear when SQSPELL_APP is changed or
invalid module name used in URL.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9403 7612ce4b-ef26-0410-bec9-ea0150e637f0

using 'pass' instead of 'ascii'. internal mbstring encoding that should
disable mbstring functions

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9402 7612ce4b-ef26-0410-bec9-ea0150e637f0

making sure that plugin works without configuration file. Most of plugin
configuration options are about tuning plugin and not about required site
specific changes.

optimized sqgetGlobalVar and include calls.

updated some docs.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9400 7612ce4b-ef26-0410-bec9-ea0150e637f0

Some language fixes.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9399 7612ce4b-ef26-0410-bec9-ea0150e637f0

More possible NUL character problems solved.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9398 7612ce4b-ef26-0410-bec9-ea0150e637f0

Set default for Reply Citation Style to 'date_time_author' instead of none.
It's better netiquette to quote with an attribution line so we should add
one by default.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9397 7612ce4b-ef26-0410-bec9-ea0150e637f0

Reintroduce the centering of the folderlist.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9396 7612ce4b-ef26-0410-bec9-ea0150e637f0

phpdoc blocks and some comments that explain check_php_version(4,2,0)

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9395 7612ce4b-ef26-0410-bec9-ea0150e637f0

phpdoc blocks

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9394 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding phpdoc comments

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9393 7612ce4b-ef26-0410-bec9-ea0150e637f0

prevent errors when files are opened directly

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9392 7612ce4b-ef26-0410-bec9-ea0150e637f0

information about mail_fetch changes.
adding INSTALL chapter about configurable plugins.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9391 7612ce4b-ef26-0410-bec9-ea0150e637f0

moved functions from setup.php
added site configuration support

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9390 7612ce4b-ef26-0410-bec9-ea0150e637f0

Removal of unused commented code blocks

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9389 7612ce4b-ef26-0410-bec9-ea0150e637f0

We are not using objects here.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9388 7612ce4b-ef26-0410-bec9-ea0150e637f0

fixed some php5 warnings

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9387 7612ce4b-ef26-0410-bec9-ea0150e637f0

removing includes that are loaded by validate.php.
switching other files from require_once() to include_once(). They might be
already loaded by plugins attached to load_prefs hook.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9386 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding api doc

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9385 7612ce4b-ef26-0410-bec9-ea0150e637f0

information about bug_report fix

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9381 7612ce4b-ef26-0410-bec9-ea0150e637f0

using squirrelmail api in order to be able to use plugin with imaps and
imap server mappings

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9380 7612ce4b-ef26-0410-bec9-ea0150e637f0

warning about possibly broken function

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9379 7612ce4b-ef26-0410-bec9-ea0150e637f0

Trimming whitespace and replacing tabs

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9378 7612ce4b-ef26-0410-bec9-ea0150e637f0

Trimming whitespace

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9377 7612ce4b-ef26-0410-bec9-ea0150e637f0

Closing PHP tags

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9376 7612ce4b-ef26-0410-bec9-ea0150e637f0

Replacing tabs with spaces

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9375 7612ce4b-ef26-0410-bec9-ea0150e637f0

Trimming whitespace

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9374 7612ce4b-ef26-0410-bec9-ea0150e637f0

do a little cleanup of listadvancedboxes HTML.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9370 7612ce4b-ef26-0410-bec9-ea0150e637f0

This is better, forgot a double quote.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9365 7612ce4b-ef26-0410-bec9-ea0150e637f0

* Fix sort order direction
* do not store sortall twice. $aMailbox['SORTALL'][$iSetIndx] is leading.
* Fix for labels. Set the refering id correct.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9364 7612ce4b-ef26-0410-bec9-ea0150e637f0

Fix a small bug when displaying less messages than the page max.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9361 7612ce4b-ef26-0410-bec9-ea0150e637f0

Fix for "No messages found" messages. Only display it when there are no
messages found

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9360 7612ce4b-ef26-0410-bec9-ea0150e637f0

information about new crypto

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9358 7612ce4b-ef26-0410-bec9-ea0150e637f0

making sure that imap server variable does not contain mapping.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9357 7612ce4b-ef26-0410-bec9-ea0150e637f0

adding ripe-md160 and md4 support for qmail-ldap

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9356 7612ce4b-ef26-0410-bec9-ea0150e637f0

Just in case ...

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9355 7612ce4b-ef26-0410-bec9-ea0150e637f0

Fixed half implemented feature. Now we provide a stream when calling this
function. This will save memory usage in case we forward from compose and
will stop exhausted memory errors in case of large attachments.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9354 7612ce4b-ef26-0410-bec9-ea0150e637f0