Version 1.5.1 -- CVS
--------------------
- New reply citation to include date and author.
- - XSS fix.
- - Norwegian Bokmal translation uses nb_NO
- - Integrated Msg_Flags plugin - turn on/off icons using configuration tool, menu
- number 11 (Tweaks), option number 3, after which users must select an icon
- theme in Options/Display Preferences. "Flag"/"Unflag" buttons are implemented
- as separate plugin.
+ - Security: Fix some possible XSS bugs.
+ - Norwegian Bokmal translation uses nb_NO.
+ - Integrated Msg_Flags plugin - turn on/off icons using configuration tool,
+ menu number 11 (Tweaks), option number 3, after which users must select an
+ icon theme in Options/Display Preferences.
+ "Flag"/"Unflag" buttons are implemented as separate plugin.
- Added Farsi and Tagalog translation support.
- Enabled Ukrainian and Russian-Ukrainian support
- - Fix that subfolders named "foo.inbox" didn't always work well.
- - sqimap_create_stream() was not obeying passed params properly. Fixed.
- - Fix non selectable inbox.
-
-Version 1.5.0
---------------------
+ - Fixed subfolders named "foo.inbox" didn't always work well.
+ - sqimap_create_stream() was not obeying passed params properly.
+ - Fix non-selectable inbox.
+ - Add src/configtest.php script which checks for common errors in the config.
+ - Improve display of some unparsable/absent dates (#891354).
+ - Add comment (Highest,Normal,Lowest) to X-Priority header.
+ Some SpamAssassin rule triggers on the absence of such a comment.
+ - Corrected moving of last message in a folder using Delete-Move-Next
+ functionality added to core in 1.5.0.
+ - Fix test for LOGINDISABLED, should only test when the auth mech actually
+ is 'login'.
+ - Update required PHP version to 4.1.0, and remove PHP 4.0.x legacy code.
+ - Make writing of preferences, abook, calendars fail better when disk full
+ (#915527).
+ - Remove code related to non-UID-supporting IMAP servers.
+ - Fix quoteimap() regex escaping problem (#921291).
+ - Added option to suppress Received: line in outbound SM headers (#847107).
+ - Changed read_body header from links to buttons (looks like message index).
+ - Add functions for building HTML forms (functions/forms.php).
+ - Moved javascript_on to session (from prefs). Centralized JavaScript
+ detection in prefs.php method checkForJavascript.
+ - Added abook_init and abook_add_class hooks.
+ - Fixed "Resume Draft" to continue using selected identities (#845290).
+ - Fixed RFC2821 incompliancy by adding a fallback mechanism to HELO if
+ EHLO is not supported.
+ - Fixed RFC2298 incompliancy by setting envelope sender to null.
+ - Fixed problem where setting all the messages on the last page of the
+ message list would return one page higher.
+ - Remove call to perform expunge on mailbox select - auto-expunge will
+ still be performed on message delete, etc.
+ - Allow single quotes to be used in theme name in conf.pl (#805309).
+ - Fixed on the fly decoding of base64 encoded attachments.
+ - Fixed message rejects by the Postfix sendmail wrapper when attachments were
+ involved.
+ - Fixed date display bug for messages of today. Show short format in case
+ of long format. (only occurs in the timeframe around 0:00 AM till
+ timezone).
+ - Added address book sorting options. Ascending/descending sorting code
+ written by Bryan Loniewski.
+ - Use Special Folder Color config option works again (#931956).
+ - In POP3-class, be more liberal regarding RFC-incompliant POP3-servers.
+ - Set up language before outputing errors in auth.php to make them appear in
+ the correct language.
+ - Added Basque translation support.
+ - Remove flag buttons / links from display if mailbox doesn't allow it.
+ - Make used of cached ordered uid list in case of server_side_sorting.
+ - Rewrite of internal mailbox sorting routines.
+ - Added sort by message size.
+ - Security: Fixed XSS vulnerability in content-type display in the attachment
+ area of read_body.php discovered by Roman Medina.
+ - Get alternating row colors of addressbook in sync with mailbox list.
+ - Give proper error when PEAR DB not found.
+ - Remove inappropriate strip_tags() from add-to-addressbook (#968475).
+ - Prefs caching didn't work properly with register_globals off (#995102).
+ - Security: fix SQL injection vulnerability in addressbook.
+ [CAN-2004-0521]
+ - Removed html_top and html_bottom hooks. No longer used/needed.
+ - Added "trailing text" for options built by SquirrelMail (text placed
+ after text and select list inputs on options pages)
+ - Custom option page values now repopulate correctly
+ - Added "no focus" option for compose page in display preferences (setting
+ reply focus to "No focus" also affects composing new messages)
+ - Current hook name is now globally available when running a hook
+ ($currentHookName)
+ - Fix bug when Saving to Draft folder that contains special characters.
+ - Added size limit to signatures saved in file backend. Created
+ error_option_save function, that allows sending error message to options
+ page. Thanks to Martynas.
+ Bieliauskas for spotting big signature "option".
+ - Make SquirrelSpell work with safe_mode enabled, if using PHP >=4.3.0.
+ Patch by Ray Ferguson.
+ - Make IP-address in Message-ID RFC822 compliant.
+ - Uneditable address book entries no longer have checkboxes on addresses page.
+ - Alignment of title text above folder list fixed.
+ - Changed structure of xtra_code functions that are used by some translations.
+ - Added Uighur language support.
+ - Added status bar to compose window when "Compose In New Window" is used.
+ - Reenabled the move_messages_button_action hook and changed its name to
+ mailbox_display_button_action to promote the new location
+ - Making delete button, when viewing a message, consider which page was viewed
+ before.
+ - $agresive_decoding configuration option changed to $aggressive_decoding.
+ Fixed spelling.
+ - Added $lossy_encoding option (provides fix for #806698)
+ - Reenabled use of $default_charset option. Option works only with en_US
+ translation in order to prevent language/charset misconfiguration.
+ - Fixes for nonpopulation of folder lists and errors when emptying the trash
+ (provides fixes for #1019185 and #1017941)
+ - Fixed $custom_css loading in squirrelspell plugin.
+ - Turkish translation uses C character case conversion rules. Fixes PHP and
+ SquirrelMail functions are assume English conversion rules.
+ - Fixed problem that caused an error when deleting all messages on the last
+ page of a paginated view (provides fix for #1014612).
+ - Added MySQL password/UNIX crypt support to mysql backend in the
+ change_password plugin.
+ - Make SMTP Authentication detection in conf.pl more RFC-compliant.
+ - Fixed IMAP errors when using mail_fetch plugin to auto-fetch on login.
+ - Fixed folder list in Create Folders list for Courier (properly skip INBOX).
+ - Fixed undefined variables in sqimap_create_stream().
+ - Added Bengali translation support.
+ - Fixed left frame mailbox list when sorting by case.
+ - Separated fortune plugin configuration variables from main plugin scripts.
+ See plugins/fortune/INSTALL.
+ - Fix for #906217 when checking spelling of inline replies, the corrected
+ words would appear through original email.
+ - Fixed empty information menu when viewing vCards without information
+ but name and e-mail address.
+ - User may now add an e-mail address when adding vCards without one to the
+ address book. No need to wait for the error message anymore.
+ - Removed japanese_xtra function used by older XTRA_CODE calls. Plugins
+ should use separate xtra_code functions. Older function does not provide
+ information about supported options.
+ - Added php-gettext classes (see class/l10n/*.php) and ngettext support
+ functions (provides fix for #1019007).
+ - LC_NUMERIC locale is set to C. (workaround for #1027130). Some plugins
+ might use decimal delimiters incorrectly.
+ - Added sq_is8bit function that can be used to detect 8bit strings.
+ - Added sq_mb_list_encodings function that provides list of encodings
+ supported by PHP mbstring module.
+ - Added Content-Transfer-Encoding: 8bit header for read receipts that contain
+ 8bit symbols. (provides fix for #934033).
+ - Fixed decoding function problems when mbstring.func_override has
+ MB_OVERLOAD_REGEX enabled.
+ - Security: Fixed XSS exploit in decodeHeader function. [CAN-2004-1036]
+ - Added site configuration and custom translation engine support to translate
+ plugin.
+ - Fixed SquirrelSpell error output. Patch courtesy David Boone.
+ - Fixed bug in IMAP read routines that treated "0" as false instead of
+ a string (patch courtesy Maurice Makaay).
+ - Fixed PHP notice when header property value is blank.
+ - Added compact paginator option. Patch by Felix Egli.
+ - Fixed reply/forward form in order to avoid warnings in SSL enabled sites.
+ Patch by Felix Egli.
+ - Removed command line option unsupported by qmail-inject in
+ class/deliver/Deliver_SendMail.class.php. Thanks to Ken Brush.
+ - Global file based address book is controled in configuration. Removed
+ global_file address book backend (use 'local_file' instead).
+ - Added Net-Style theme by Gabriele Maidecchi. Closes patch #1041323.
+ - Fix: Messages shown with bad times in message list due to misinterpreted
+ UW IMAP internal date.
+ - Fixed path used by random theme.
+ - Utf7-imap encoding/decoding functions will check, if required charset is
+ supported by mbstring and use it. Fixes bug #1005353.
+ - LDAP backend will use internal SquirrelMail charset conversion functions
+ instead of PHP XML extension. Fixes bug #655137.
+ - Added Wood and Silver Steel themes by Pavel Spatny and Simple Green theme.
+ - Fix two time zone calculation bugs, thanks to David White. Fixes #1063879.
+ - 'Priority' and 'Importance' headers are now also recognised, next to the
+ 'X-Priority' header that we've supported since a long time. Fixes #1039935.
+ - Handle a reload of the signout page gracefully: do not present an error
+ about having to be logged in to be able to sign out. Fixes #1070069.
+ - Prevent & being eaten in set_url_var, thanks Marcin Orlowski (#1053725).
+ - Removed internal_link hook.
+ - Added sq_setlocale function in order to use multiple locale names.
+ - Set up language before outputing errors in signout.php to make them appear
+ in the correct language.
+ - Added size attributes to new_mail sound tags. Fixes #818958.
+ - Removed extra ; in SquirrelMail added Received header per RFC 822
+ (#1088548).
+ - Add IMAP server type "hmailserver" to make search work with hMailServer.
+ Fixes #1085377.
+ - Reuploaded newmail plugin sounds. Fixes files uploaded to cvs without binary
+ option.
+ - Changing your JavaScript preference required a re-login to work.
+ Fixes #983614.
+ - Fix listcommands plugin to behave like normal reply/compose
+ links, and return to message page that originally called from.
+ - Max upload file size now correctly handles a '-1' value, meaning
+ unlimited. (#1094569).
+ - Security: Added hook for Preferences Backend to resolve potential
+ file inclusions. [CAN-2005-0075]
+ - Remove Printer Friendly Clean Display config option, the cleaning
+ is now always done.
+ - Create new Options section "Compose Preferences" and move some
+ options from Display Preferences there; also move some around within
+ Display Preferences.
+ - Security: Fix possible file/offsite inclusion in src/webmail.php.
+ [CAN-2005-0103]
+ - Security: Fix possible XSS issues in src/webmail.php. [CAN-2005-0104]
+ - Fix undefined variables in src/webmail.php.
+ - 24hr clock format should include a leading 0.
+ - Removed numeric keys for plugin array in config.php.
+ - Fixed translations of "On DATE, AUTHOR Wrote" and "AUTHOR Wrote" replies.
+ - Added sq_str_pad function for padding of multi-byte strings.
+ - Added sq_strlen function for calculation of multi-byte string length.
+ - Quoted "INBOX" in check for the status of INBOX in a LIST call. Fixes an
+ issue with a specific IMAP server.
+ - Move default_pref to the config/ dir, but keep checking legacy locations
+ first for bc. Do not fail with an error when default_pref not found, just
+ create an empty one.
+ - Add trailing slash for data directory used by global file based address
+ book (#1105760).
+ - Fixed sorting problem is get_squirrel_sort() function (#1115403).
+ - Add "Show Only Subscribed Folders" option to allow users to show all
+ folders instead of only subscribed ones (#1105756, #1105250).
+ - Add workaround for Mercury/32 servers that will subscribe again to
+ an already subscribed folder (#1115409).
+ - Added blank.png for missing image support.
+ - Use the proper attachment filenames in case of forwarding a message.
+ - Fix for #855320 where Outlook Express was creating CID: based URLs,
+ but not assigning a content-id to the attachment. This is a bug in
+ Outlook Express and is non-RFC compliant behaviour.
+ - Strip <outbind://> tags out. This is a Microsoft only protocol and
+ references files local to the sending machine. This causes issues
+ with Internet Explorer.
+ - Replace <img src="outbind://"> links with clean images to stop
+ issues with Internet Explorer not being able to track down the image.
+ - Empty src attribute on img tags causes logouts (IE only), replacing
+ string with blank.png.
+ - Added vmailmgrd backend to change_password plugin.
+ - Fixed change_password_init hook.
+ - Give an error to the user when SquirrelMail is not configured yet
+ (instead of "failed to include config.php").
+ - Added swf and mp3 support to newmail plugin. Restored custom user media
+ support.
+ - Removed unused save_option_header() function from display and compose
+ option includes.
+ - Fixed bug #1124764, view unsafe images inside printer friendly view.
+ - Fixed bug #1032366, remove NUL characters in text attachments on sent.
+ - URL Encode required for string being passed in mailto: links to pass on
+ additional values (cc, body, subject etc).
+ - Fixed bug #801060. Removed option for INBOX in filters plugin as source
+ is always INBOX.
+ - Always show Purge link next to Trash, even when empty.
+ - errors in addressbook_init() function are no longer fatal. If function
+ fails to activate address book backend, it displays error box (with
+ error_box() function). error box can be hidden by setting first
+ function argument to false.
+ - Sanitized search in ldap address book backend. Use of asterisk
+ together with other symbols is not supported.
+ - Added ldap backend to change_password plugin.
+ - Change defaults of some prefs to more sensible / usable settings.
+ - Revise the documentation of the packaged plugins.
+ - Fixed edit form checks in address listing (#1124018).
+ - After sending resumed draft, return to message list.
+ - Parse and replace mailto: links with internal compose links when
+ viewing in HTML format.
+ - Plugins may now define an "extra" array element to return to the attachment
+ types hook, which will be also inserted in the attachment link for the
+ plugin.
+ - Added mouseover row highlighting on message index.
+ - Added <label> for checkboxes on message index (when highlighting is off).
+ - Fixed mailto: parsing in functions/url_parser.php.
+ - Fixed broken signout page (plugins work here again).
+ - Fixed configtest to use correct PostgreSQL connection function
+ (#1166228).
+ - Added configuration option that blocks remote use of
+ src/configtest.php by default.
+ - Fixed ldap checks in configtest.php.
+ - Added configuration option that controls listing of global file based
+ address book.
+ - Fixed administrator's plugin breaks related to latest sqGetGlobalVar()
+ and $plugins array changes.
+ - Included local configuration file in config.php generated by
+ administrator's plugin.
+ - Updated the Filters plugin to comply with our Plugin Standards.
+ - Fixed Filters plugin problems with duplicate rule processing and false
+ unread message counts (Bug# 676073 and patch #919045).
+ - Strip position:absolute style from HTML mails.
+ - Add ability to the Filters plugin to filter on Message Body, or both
+ the Headers and the Message Body.
+ - Update the message copy and move functions to allow for error handling.
+ - Fix the filter plugin from halting the login process when copying errors
+ occur.
+ - Clean up the folder management (create, rename, subscribe) code.
+ - Added filtering support to address book LDAP backend (#539534). Thanks
+ to Tim Bell.
+ - Added domain scope limit controls to address book LDAP backend. Issue
+ is specific to Microsoft ADS (#1035454). Thanks to Michael Brown.
+ - Missing PHP LDAP extension errors are now handled by ldap backend and
+ errors are displayed after address book initialization.
+ - LDAP connections are opened during search and not during address book
+ initialization.
+ - Fixed wrapping of multibyte strings in message view and replies
+ (#1043576).
+ - mbstring internal encoding is switched to ASCII, if mbstring.func_overload
+ is enabled (#929644).
+ - Fixed checking for quota when appending to Sent folder (#1172694).
+ - Create a generic function to empty a folder tree, thanks to
+ Randy Smith (#1145578).
+ - Add robots noindex/nofollow meta tag to SquirrelMail generated pages.
+ - Fix incorrect folder hierarchy display (#1009654), thanks
+ Awais Ahmad for the patch (#1082558).
+ - src/delete_message.php script is disabled. It provided functions that
+ could be implemented without playing with multiple redirects.
+ - Remove lots of obsoleted code from left_main.php.
+ - Partial support of IMAP REFERRAL: do not fail on IMAP REFERRAL response
+ (RFC 2221) but log the user out with a hint. Patch by Ariel Arjona
+ (#1006242).
+ - Fixed SquirrelMail language cookie detection in php register_globals=off.
+ - If default SquirrelMail language is set to empty string, interface will
+ try to follow browser's HTTP_ACCEPT_LANGUAGE header or fallback to en_US
+ (#764709).
+ - If From: field is unset in an email, header object for from field is not
+ correctly set, and generates an error on reply (#1179754).
+ - Add Cancel button to addressbook (#1180565).
+ - RFC 2046: Send mixed messages with multipart/alternative nested boundaries
+ with correct boundary strings.
+ - EXPERIMENTAL: Mailbox listing converted to templated layout. Added
+ template support functions and classes. Rewrote some page header and
+ mailbox listing functions. Disabled 'show_recipient_instead' option.
+ Added more columns to mailbox listing and index order options.
+ - Removed sort by internal date option. Now you can use the Received column
+ in the index order option page for that.
+ - WARNING: if same user data storage location is used to store SquirrelMail
+ 1.4.x and 1.5.1+ user settings, SquirrelMail 1.5.1+ will reset mailbox
+ display order (Options->Index Options) in stable. Backup your data before
+ testing 1.5.1+ or use different storage location.
+ - Added experimental iframe sandbox for display of html formated emails.
+ - Disabled LOGINDISABLED check in src/login.php when IMAP server mapping is
+ used.
+ - Check destination folder in mail_fetch plugin before storing messages
+ in it. Modify destination folder, if it is renamed or deleted within
+ SquirrelMail (#584658).
+ - Made the Flags column a required column in the index order options page to
+ prohibit missing seen/unseen info in the messages list.
+ - Fixed disabled prev/next links in the message display when you reach the
+ end of the page (message set).
+ - Moved delete button to the right in the message list.
+ - Fixed imap capability detection in bug_report plugin. It was broken
+ when IMAP TLS was enabled or imap server mapping was used.
+ - Added mail_fetch plugin configuration file and moved plugin functions
+ from setup.php to functions.php file.
+ - SquirrelSpell plugin was modified to use standard SquirrelMail
+ preference system. User dictionaries that are stored in $username.words
+ files should be automatically updated to new format, when user logs in.
+ Fixed possible php script errors caused by $SQSPELL_APP configuration
+ variable changes. Removed $SQSPELL_EREG configuration option. Plugin's
+ version increased to 0.5.
+ - $skip_SM_header option was replaced with $encode_header_key and
+ $hide_auth_header options. First option allows to encode user's information
+ with provided encryption key (set in 2. Server settings -> B. Update SMTP /
+ Sendmail settings). Second option allows to disable authenticated user part
+ in Received: header, when user can't force used email address. It is set in
+ 4. General Options -> 9. Allow editing of identity.
+
+Version 1.5.0 - 2 February 2004
+-------------------------------
- Added new preference that determines cursor focus when replying
- Added support in conf.pl for MS cls command.
- conf.pl changes for relative paths outside the SM tree (#715119).
- Fixed message highlighting for To, CC and From and
for RFC1522 headers (bug #719564)
- Fixed incorrect folding inside message-id's
- - Fix for Folders being listed in create/remove/rename operations
+ - Fix for Folders being listed in create/remove/rename operations
(#725443, #722823, #729225)
- Fix for bad attachment view link (#697381, #729295)
- Fix comp_in_new in search and addressbook not having right parameters (#731768).
- Support MS Exchange "DOMAIN/username/mailbox"-style usernames (#745814).
- Do not set Full Name to empty when edit_identity is false and edit_name is true (#750728).
- Added koi8-u, windows-1255, windows-1256, iso-8859-6 charset decoding support.
- - Rewrite of sqimap_read_data_list which as result we better handle the
- returned imap responses and we display error messages when connections are
+ - Rewrite of sqimap_read_data_list which as result we better handle the
+ returned imap responses and we display error messages when connections are
dropped.
- Rewrite of email address parser and solve the infinite loops issues due to
bad formatted addresses.
- Added default settings for Mercury/32 to conf.pl.
- Fix to prevent mailboxes are deleted in selected stage which is against
RFC3501.
- - Fix reply all address string in case the personal name contained a comma
+ - Fix reply all address string in case the personal name contained a comma
(address separator).
- Added SASL PLAIN to IMAP and SMTP. Thanks to avel for the prodding and
code snippet.
global.php
- HTML Filter bugfixes and further strengthening in response to some
findings reported by stardust.
- - Disabled Vietnamese and Ukrainian translations. They are done in different
+ - Disabled Vietnamese and Ukrainian translations. They are done in different
language.
- Removed all translations. SquirrelMail translations are distributed as
separate packages and kept in different cvs module.
can enable it by setting variable in plugins/spamcop/setup.php
- Fix again for Internet Explorer's stupidity of decoding characters, then
executing it blindly. See http://www.securityfocus.com/archive/1/340118.
- - Replaced obsolate 2mbit.com RBL with ahbl.org RBL. Bug.No.829887
+ - Replaced obsolete 2mbit.com RBL with ahbl.org RBL. Bug.No.829887
- Added a sitewide override for authenticated SMTP - see authentication.txt.
- Fixed sorting of sent_subfolders.
Sent_subfolder plugin is hooked to special_mailbox hook.
- Integration of delete_move_next plugin into core.
- - Compression of buttons/headers for message index and message body
+ - Compression of buttons/headers for message index and message body
- New option to save replies in the same folder as the original message.
- Fix for date/time display in certain timezones.
- Fix some features of login.php that are used by some plugins and was broken
by register_globals = off.
- - Added Greek locale. Thanks to George P. Kremmydas
+ - Added Greek locale. Thanks to George P. Kremmydas
<george at kefalonia-ithaki.gr> and Alexandros Vellis <avel at noc.uoa.gr>
- Added notes about PHP 4.3.x to documentation.
- Fixed \Noselect mailbox detection.
- Update required PHP version in documentation to 4.0.6.
- Fixed delete_move_next plugin to remember where it moved mail to.
- Fixed compose to remember attachments.
- - Fixed possible XSS in compose when replying to malicious sources.
+ - Security: Fixed possible XSS in compose when replying to malicious sources.
- Add display of the maximum filesize for attachment uploads.
- Do not add < and > if an identity doesn't contain a full name.
- Fixed bug in parsing Content-Type properties part.
- Patch from O'Shaughnessy Evans <shaug-sqm@wumpus.org> to allow disabled $org_logo
- Lots of language/internationalization updates
- conf.pl fixes for certain uses of SM_PATH, esp. $signout_page.
- - SMTP & IMAP auth method "plain" was a misnomer - now corrected to
+ - SMTP & IMAP auth method "plain" was a misnomer - now corrected to
the more accurate name "login" (Plain to be implemented soon).
- Fix for compose after search bug. (Closes #662346)
- Improved error reporting when sending mail with SMTP.
- Fix IMAP error when returning to message from viewing image attachment.
- Do more trimming to indented subjects in threadview so they don't wrap.
- Trash folder now displays purge link in all cases. (Closes #655943)
- - Fix typo in delete_move_next plugin which caused php file-handle errors.
+ - Fix typo in delete_move_next plugin which caused PHP file-handle errors.
- Make vCard more liberal in what it accepts (thanks Kurt Pires).
- Fix problem with subject encoding when using Japanse.
- Move login_form hook to be actually in the login form.
- Correctly fold encoded header lines.
- Fix prefs caching not working correctly in PHP 4.3 caused by a stupid
version checking mechanism.
- - Fix XXS hole that allowed JavaScript execution by sending someone
+ - Security: Fix XSS hole that allowed JavaScript execution by sending someone
an email with specially crafted headers. Thanks Jason Munro, and
Masato Higashiyama.
- Added CRAM-MD5 and DIGEST-MD5 authentication support for IMAP and SMTP
- Experimental TLS support for IMAP and SMTP (requires PHP 4.3.x)
- Override settings with config_local.php
- - Compose form no longer shows attachment options if php file_uploads
+ - Compose form no longer shows attachment options if PHP file_uploads
disabled
- Improved bodystructure parsing.
- Support for windows-1257 charset.
- Moved view_header code out of read_body.php and put it in view_header.php.
- Open message/rfc822 attachments in read_body what makes it possible to
reply to attached messages.
- - Rewrite of the newMail function in compose.php. This simplifies the
+ - Rewrite of the newMail function in compose.php. This simplifies the
interface between read_body.php and compose.php.
- Moved compose related code from read_body to compose.
- Rewrite of mailbox-display to make it more modular (we use it in search.php).
- Added support for displaying multiple entities.
- Changed finding display entities.
- - Extract disposition and xmailer header information in the headerparser
+ - Extract disposition and xmailer header information in the headerparser
instead of request them individualy by an imap-call.
- Store message objects in the current session. This saves a lot of imap-calls.
- Added UID support.
- Store addresses in an object instead of a string.
- - Rewrite of the bodystructureparser function. Now the message object contains
+ - Rewrite of the bodystructureparser function. Now the message object contains
all described parameters in RFC2060.
- Introduction of the mime class where all mime related functions are situated
- Fixed removing MDN attachments.
- Fixed MDN problems with js confirmbox.
- Speedimprovements in case we download mime-entities.
- Added possibility to extract message/rfc822 attachments and store them as
- the original message in a folder.
+ the original message in a folder.
- Right to left languages implementation initiated
- Enable people with file_uploads = off to still send mail. Patch from Seth
E. Randall.
- Moved the generic_header hook back to page_header.php. bug #554278
- Make default theme work. Bug #557313, thanks Tyler Bannister.
-
+
Version 1.2.7 -- June 21 2002
-----------------------------
- fix for 'compose as new' link. bug #554886
- fix for errant '.' in default_folder_prefix. bug #551310
- fix for folder names with '?' and '*'. bug # 559257, #552180
- added the ability to search without the charset argument. #552288
- - Made /noselect node display optional. bug #554988, patch #452178
+ - Made /noselect node display optional. bug #554988, patch #452178
- Improved support for macosx IMAP server thanks Brian Haun
- Added macosx friendly search, thanks Brian Haun bug #553038
- Fixed word wrap problems when sending mail. bug #552961, #556143
- Added possibility to use multiple compose windows without loss
of attachements.
- - Fixed forward message/rfc822 attachments from a search
+ - Fixed forward message/rfc822 attachments from a search
- Fix SpamCop plugin.
- Fixed send MDN link.
- - Fixed dealing with \r\n and \n in smtp.php.
+ - Fixed dealing with \r\n and \n in smtp.php.
- Fixed to, cc, bcc arrays in message->header
- - Speed optimizements in generating message-lists.
+ - Speed optimizements in generating message-lists.
- Fixed loss of attachment with html addressbook.
- Fixed saving drafts with attachments
-
-Version 1.2.6 -- April 29 2002
+
+Version 1.2.6 -- April 29 2002
------------------------------
- - A complete MagicHTML rewrite since the existing codebase was
+ - Security: A complete MagicHTML rewrite since the existing codebase was
causing too many XSS problems. Hopefully now Nick Cleaton will
leave us alone. :) Testing credits go to Nick.
- - Fix for cross-site scripting vulnerability (bug #545933)
+ - Security: Fix for cross-site scripting vulnerability (bug #545933)
Reported by Nick Cleaton.
- Changing "emtpy" to "purge" for more clarity.
- - Fix for cross-site scripting vulnerability (bug #544658)
+ - Security: Fix for cross-site scripting vulnerability (bug #544658)
Reported by Nick Cleaton.
- Fix for incorrect word wrap in Opera (bug #495073)
- Workaround for older prefs: some of them contain "None" for
- Added a server-side sorting global option
- Compose in new window size can be set in Display prefs.
- Logout error system unified.
- - Fix for a "theme passed as cookie" exploit.
+ - Security: Fix for a "theme passed as cookie" exploit. [CAN-2002-0516]
- PostgreSQL is now supported for database backed use
- Added user option to sort messages by internal date
- - Changed attachment handling now attachments are adressed to
+ - Changed attachment handling now attachments are adressed to
unique compose session.
- Added forward messages as message/rfc822 attachment
- Fixed handling message/rfc822 attachments
- Filtering now happens on folder list refresh (filters plugin)
- Added checking of input of the folders page
- Made erronous deleting of folders harder (patch #514208)
- - Made SquirrelMail display \Noselect nodes in Cyrus also made it
+ - Made SquirrelMail display \Noselect nodes in Cyrus also made it
impossible to try to delete \Noselect nodes. (patch #452178)
- SquirrelSpell version 0.3.8 -- pretty configuration error reporting
added by popular demand.
- Improved the handling of IMAP [PARSE] messages to reduce retrieval error.
- - Fixed small bug in handeling timezone (bug #536149).
+ - Fixed small bug in handeling timezone (bug #536149).
- MDN message now RFC compatible (bug #537662).
- Fixed html tables in printer_friendly_bottom.php (patch #542367), and
make it so that printer friendly uses black-on-white colors in stead
of the theme colors.
- Fixed return address of MDN receipts when having multiple identities
(patch #530139).
-
+
Version 1.2.5 -- 22 February 2002
---------------------------------
- Multiple mailbox list calls cached.
Version 1.2.4 -- 25 January 2002
--------------------------------
- - Fixes a nasty remote arbitrary command execution vulnerability
+ - Security: Fixes a nasty remote arbitrary command execution vulnerability
in the spellchecker plugin.
-
+
Version 1.2.3 -- 21 January 2002
--------------------------------
- Fixed focus system on pages that contain forms.
- - Fixed IMAP code to send different command identifiers as per
+ - Fixed IMAP code to send different command identifiers as per
section 2.2.1 of RFC 2060.
- Fixed 'sticky priority' so that replies are set to the same
priority as the original message.
- Fixed a bug appearing on some apache virtual hosts
- Fixed javascript error (#505255)
- Fixed the db_prefs so they work again (#499609, thanks to Simon Dick)
-
+
Version 1.2.2 -- 1 January 2002
-------------------------------
- - Fixed an infinite loop in printer friendly when wrapping option
- is not in the prefs.
- Bug reported by Boris Manojlovic <steki@verat.net>
+ - Fixed an infinite loop in printer friendly when wrapping option
+ is not in the prefs.
+ Bug reported by Boris Manojlovic <steki@verat.net>
- Html cleanup, with patch from Dave Huang (#496712)
- Fixed a problem saving prefs when using PHP 4.1
- Russian, Thai, Swedish, Dutch and French update.
***************************************************************
-*** Squirrelmail Development Series 1.1 and 1.1 Pre-Releases ***
+*** SquirrelMail Development Series 1.1 and 1.1 Pre-Releases ***
****************************************************************
Version 1.2.0-rc3 -- 2 December 2001
------------------------------------
- Speed improvements and optimizations on much of the code
- Comments added, formatting cleaned up for much of the code
- - Several plugins integrated into the Squirrelmail core
+ - Several plugins integrated into the SquirrelMail core
(focus change, attachment common, printer friendly, etc)
- Several plugins added as "Official Plugins" to the main
- Squirrelmail distribution
+ SquirrelMail distribution
- First half of a rewrite of the option pages code
- The Paginator!!!
- - Other stuff that I don't recall (developers, please fill this in!)
+ - Other stuff that I don't recall (developers, please fill this in!)
Version 1.1.3 -- (never really released)
----------------------------------------
- Added language aliasing
- Added Turkish translation
-Version 1.1.2 -- May 21, 2001
+Version 1.1.2 -- May 21, 2001
-----------------------------
- Many bugs squashed
- Several UI tweaks and improvements
- Updated Czech translation
- Support for multiple identities
- Support for Russian Apache removed. It is now deemed easier to just
- turn off Charset Recoding in the Russian Apache config. See the file
+ turn off Charset Recoding in the Russian Apache config. See the file
doc/README.russian_apache
Version 1.1.1 -- April 30, 2001
- Made validate.php include a few more standard things
- Corrected a bug when sending an email properly
-Version 1.1.0 -- April 21, 2000
+Version 1.1.0 -- April 21, 2000
-------------------------------
- Added option to have signout page redirect to another page (patch from
Scott Bronson) This can be configured in conf.pl (Org Prefs)
**************************************
-*** Squirrelmail Stable Series 1.0 ***
+*** SquirrelMail Stable Series 1.0 ***
**************************************
Version 1.0.6 -- April 19, 2001
- Updated German translation (thanks to Ronald Bauerschmidt <rb@debian.org>)
- Updated Finnish help files
-Version 1.0.5 -- April 17, 2001
+Version 1.0.5 -- April 17, 2001
-------------------------------
- MAJOR security issues addressed. Please upgrade as soon as possible.
+ [CAN-2001-1159]
- Downloading attachments should work better due to a tip by Ray Black III.
- Fixed bug with drop-down folder list not containing INBOX
- Added Swedish help files Teemu Junnila <teejun@vallcom.com>
- Added Italian help files Antonetti Roberto <antonr@piceniaweb.com>
-
-Version 1.0.4 -- April 9, 2001
+
+Version 1.0.4 -- April 9, 2001
------------------------------
- Fixed some bugs with folder creation
- Security fix for UW IMAP server to disallow folder paths outside of
- Made subject column take up whatever width is available
- Added bcc to html addressbook search
-Version 1.0.3 -- March 9, 2001
+Version 1.0.3 -- March 9, 2001
------------------------------
- Many i18n enhancements/fixes
- Fixed bug with default theme path being set incorrectly
- Updated Norwegian translation
- Updated Brazillian Portuguise translation
-Version 1.0.2 -- February 8, 2001
+Version 1.0.2 -- February 8, 2001
---------------------------------
- - Added a workaround for RedHat's 4.0.4pl1-3 binary package (It's also
+ - Added a workaround for RedHat's 4.0.4pl1-3 binary package (It's also
the same workaround for Konqueror and other PHP installations?)
- Select All works through the search
- Better escaped string handling from POST variables
- Many more code cleanups and optimizations
- Added Hungarian translation by Teemu Junnila <teejun@vallcom.com>
- - Added Icelandic translation by Karl Heiðar" <karlh@macho.is>
+ - Added Icelandic translation by Karl Hei�r <karlh@macho.is>
- Updated Taiwan translation
- - Updated Sweedish translation
+ - Updated Swedish translation
- Updated Finnish translation
-Version 1.0.1 -- February 1, 2001
+Version 1.0.1 -- February 1, 2001
---------------------------------
- Improved the way sqimap_read_data() is handled
- - Sped up "no sorting" even more
+ - Sped up "no sorting" even more
- Fixed problems with sending messages
- Fixed some pass-by-reference calls that caused problems with newer
PHP versions
- If subject is > 55 chars, trims it and puts "..." in message list
- Hundreds of minor changes to remove all verbose PHP warning messages
-Version 1.0 -- January 30, 2001
+Version 1.0 -- January 30, 2001
-------------------------------
- Updated config_default.php to include attachment_common plugin
(now in distribution)
- Fixed problems in sqimap_read_body(), made it more reliable
- Added French translation of help files by gore K <gore_k@ymca-cepiere.org>
- Added Finnish translation by Teemu Junnila <teejun@vallcom.com>
- - Updated Sweedish translation
+ - Updated Swedish translation
- Updated Russian translation
********************************************************
-*** Squirrelmail Development Series 1.0 Pre-Releases ***
+*** SquirrelMail Development Series 1.0 Pre-Releases ***
********************************************************
-Version 1.0pre3 -- January 22, 2001
+Version 1.0pre3 -- January 22, 2001
-----------------------------------
- Fixed some "Select All" bugs
- Finally fixed the IE/SSL download problem!!
- Updated Czech translation
- Updated Korean translation
-Version 1.0pre2 -- January 15, 2001
+Version 1.0pre2 -- January 15, 2001
-----------------------------------
- A number of security fixes
- Replaced error messages with better, formatted, and meaningful messages.
- Added Catalan translation of Help documents by Josep Sanz <jsanz@fa.upc.es>
- Added Taiwan translation by "ching" <ching@kiwa.com.tw>
-Version 1.0pre1 -- December 14, 2000
+Version 1.0pre1 -- December 14, 2000
------------------------------------
- Fixed bug in sending messages with a blank line with a "."
- Folder displays have been changed to be more readable in drop-down lists
*****************************************
-*** Squirrelmail 0.5 and Pre-Releases ***
+*** SquirrelMail 0.5 and Pre-Releases ***
*****************************************
-Version 0.5 -- September 25, 2000
+Version 0.5 -- September 25, 2000
---------------------------------
- Fixed some problems with downloading attachments in IE
- If no date is set in header, we take internal date of the imap server
- - Fixed some lingering bugs in mime parsing
+ - Fixed some lingering bugs in mime parsing
- Searching specifies CHARSET option
- Security fixes
- Fixed hyperlink rendering problems
-Version 0.5pre2 -- September 6, 2000
+Version 0.5pre2 -- September 6, 2000
------------------------------------
- Added quite a few new themes
- Fixed double folder problem on some servers
- Added Italian translation from Aldo Moresco <moresco@idcm.it>
- Added French translation from Ali Nedjimi <lrdfrx@club-internet.fr>
-Version 0.5pre1 -- August 9, 2000
+Version 0.5pre1 -- August 9, 2000
---------------------------------
- - Searching folders functionality added
+ - Searching folders functionality added
- Date display now is similar to Netscape Messenger
- Many bugs have been reported to the list, and been squashed
- - Help system developed
+ - Help system developed
- Folder list now shows configurable details about messages
- It is now possible to select multiple subscribes/unsubscribes
- Removed a bunch of annoying "success" screens, improved navigation
- Changed how attachments are displayed and handled
- Rewrote MIME support from scratch, optomizing it an unbelievable amount
- Added support for message highlighting
- - Moved Address and Send buttons on Compose form for easier access
+ - Moved Address and Send buttons on Compose form for easier access
- Added Polish translation from Lukasz Klimek <casa@LO.Pila.PL>
- Added Swedish translation from Tobias Ekbom
- Added Brazilian Portuguse translation from Henrique Moura
*****************************************
-*** Squirrelmail 0.4 and Pre-Releases ***
+*** SquirrelMail 0.4 and Pre-Releases ***
*****************************************
-Version 0.4 -- May 15, 2000
+Version 0.4 -- May 15, 2000
---------------------------
- If subject is blank, displays "(no subject)"
- Fixed a few minor bugs and typos reported to list
folder list. This will change with 0.5.
- Optomizations, fewer IMAP calls, more efficient sorting algorithms.
- Fixed all bugs listed in BUG
- - When inside the Sent folder, it displays "To" instead of "From"
+ - When inside the Sent folder, it displays "To" instead of "From"
- Added ability to go to Next and Previous message while reading a message
- Caching of the message headers in mailbox (much faster)
- Added a preference that allows users to customize how many messages
- Added Subscribe/Unsubscribe to folders
- Fixed bug in UW that didn't mark unseen messages
- Saving sent messages into $sent_folder
- - It doesn't bail out if PHP wasn't compiled with --with-gettext.
+ - It doesn't bail out if PHP wasn't compiled with --with-gettext.
It only uses english in this case.
- Added support for Cyrillic (thanks to Artem Botchkov for help)
- Included information on Russian Apache from Konstantin Riabitsev
*****************************************
-*** Squirrelmail 0.3 and Pre-Releases ***
+*** SquirrelMail 0.3 and Pre-Releases ***
*****************************************
Version 0.3.1 -- March 13, 2000
- Fixed a bug that wouldn't let you rename folders with UW server.
- Other minor bugfixes
-Version 0.3pre2 -- March 5, 2000
+Version 0.3pre2 -- March 5, 2000
--------------------------------
- Rewrote folder deletion. It works much more flexably now.
- Fixed message deletion that didn't always delete the right messages.
*****************************************
-*** Squirrelmail 0.2 and Pre-Releases ***
+*** SquirrelMail 0.2 and Pre-Releases ***
*****************************************
Version 0.2.1 -- January 05, 2000
*****************************************
-*** Squirrelmail 0.1 and Pre-Releases ***
+*** SquirrelMail 0.1 and Pre-Releases ***
*****************************************
Version 0.1.2 -- December 20, 1999
projects / squirrelmail.git / blobdiff