#!/usr/bin/env perl
# conf.pl
#
-# Copyright (c) 1999-2012 The SquirrelMail Project Team
+# Copyright (c) 1999-2014 The SquirrelMail Project Team
# Licensed under the GNU GPL. For full terms see COPYING.
#
# A simple configure script to configure SquirrelMail
$disable_security_tokens = 'false' if ( !$disable_security_tokens );
$check_referrer = '' if ( !$check_referrer );
$ask_user_info = 'true' if ( !$ask_user_info );
+$use_transparent_security_image = 'true' if ( !$use_transparent_security_image );
+$display_imap_login_error = 'false' if ( !$display_imap_login_error );
if ( $ARGV[0] eq '--install-plugin' ) {
print "Activating plugin " . $ARGV[1] . "\n";
print "17. Only secure cookies if poss. : $WHT$only_secure_cookies$NRM\n";
print "18. Disable secure forms : $WHT$disable_security_tokens$NRM\n";
print "19. Page referal requirement : $WHT$check_referrer$NRM\n";
+ print "20. Security image : $WHT" . (lc($use_transparent_security_image) eq 'true' ? 'Transparent' : 'Textual') . "$NRM\n";
+ print "21. Display login error from IMAP: $WHT$display_imap_login_error$NRM\n";
print "\n";
print "R Return to Main Menu\n";
} elsif ( $menu == 5 ) {
elsif ( $command == 17 ) { $only_secure_cookies = command319(); }
elsif ( $command == 18 ) { $disable_security_tokens = command320(); }
elsif ( $command == 19 ) { $check_referrer = command321(); }
+ elsif ( $command == 20 ) { $use_transparent_security_image = command322(); }
+ elsif ( $command == 21 ) { $display_imap_login_error = command323(); }
} elsif ( $menu == 5 ) {
if ( $command == 1 ) { $use_icons = commandB3(); }
# elsif ( $command == 3 ) { $icon_theme_def = command53(); }
sub command311b {
print "$NRM";
- print "\n SquirrelMail adds username information to every outgoing
- email in order to prevent possible sender forging when users are
- allowed to change their email and/or full name.
+ print "\n SquirrelMail adds username information to every outgoing email in
+ order to prevent possible sender forging by users that are allowed
+ to change their email and/or full name.
- You can remove user information from this header (y) if you think that
- it violates privacy or security.
+ You can remove user information from this header (y) if you think
+ that it violates privacy or security.
- Note: If users are allowed to change their email addresses,
- this setting will make it difficult to determine who sent what where.
+ Note: If users are allowed to change their email addresses, this
+ setting will make it difficult to determine who sent what where.
Use at your own risk.
Note: If you have defined a header encryption key in your SMTP or
-# check_referrer (since 1.1.5.2)
+# check_referrer (since 1.5.2)
sub command321 {
print "This option allows you to enable referal checks for all page requests\n";
print "made to SquirrelMail. This can help ensure that page requests came\n";
+# use_transparent_security_image (since 1.5.2)
+sub command322 {
+ print "When HTML messages are being displayed, SquirrelMail's default behavior\n";
+ print "is to remove all remote images and replace them with a local one.\n";
+ print "\n";
+ print "This option allows you to specify whether the local image should contain\n";
+ print "text that indicates to the user that \"this image has been removed for\n";
+ print "security reasons\" (translated into most languages), or if it should be\n";
+ print "transparent.\n";
+ print "\n";
+
+ if ( lc($use_transparent_security_image) eq 'true' ) {
+ $default_value = "y";
+ } else {
+ $default_value = "n";
+ }
+ print "Use transparent security image? (y/n) [$WHT$default_value$NRM]: $WHT";
+ $use_transparent_security_image = <STDIN>;
+ if ( ( $use_transparent_security_image =~ /^y\n/i ) || ( ( $use_transparent_security_image =~ /^\n/ ) && ( $default_value eq "y" ) ) ) {
+ $use_transparent_security_image = 'true';
+ } else {
+ $use_transparent_security_image = 'false';
+ }
+ return $use_transparent_security_image;
+}
+
+
+
+# display_imap_login_error (since 1.5.2)
+sub command323 {
+ print "Some IMAP servers return detailed information about why a login is\n";
+ print "being refused (the username or password could be invalid or there\n";
+ print "might be an administrative lock on the account).\n";
+ print "\n";
+ print "Enabling this option will cause SquirrelMail to display login failure\n";
+ print "messages directly from the IMAP server. When it is disabled, login\n";
+ print "failures are always reported to the user with the traditional \"Unknown\n";
+ print "user or password incorrect.\"\n";
+ print "\n";
+
+ if ( lc($display_imap_login_error) eq 'true' ) {
+ $default_value = "y";
+ } else {
+ $default_value = "n";
+ }
+ print "Display login error messages directly from the IMAP server? (y/n) [$WHT$default_value$NRM]: $WHT";
+ $display_imap_login_error = <STDIN>;
+ if ( ( $display_imap_login_error =~ /^y\n/i ) || ( ( $display_imap_login_error =~ /^\n/ ) && ( $default_value eq "y" ) ) ) {
+ $display_imap_login_error = 'true';
+ } else {
+ $display_imap_login_error = 'false';
+ }
+ return $display_imap_login_error;
+}
+
+
+
sub command_userThemes {
print "\nDefine the user themes that you wish to use. If you have added\n";
print "a theme of your own, just follow the instructions (?) about\n";
print "[$WHT$addrbook_dsn$NRM]: $WHT";
$new_dsn = <STDIN>;
if ( $new_dsn eq "\n" ) {
- $new_dsn = "";
+ $new_dsn = $addrbook_dsn;
} else {
$new_dsn =~ s/[\r\n]//g;
$new_dsn =~ s/^\s+$//g;
print "[$WHT$prefs_dsn$NRM]: $WHT";
$new_dsn = <STDIN>;
if ( $new_dsn eq "\n" ) {
- $new_dsn = "";
+ $new_dsn = $prefs_dsn;
} else {
$new_dsn =~ s/[\r\n]//g;
$new_dsn =~ s/^\s+$//g;
print "[$WHT$addrbook_global_dsn$NRM]: $WHT";
$new_dsn = <STDIN>;
if ( $new_dsn eq "\n" ) {
- $new_dsn = "";
+ $new_dsn = $addrbook_global_dsn;
} else {
$new_dsn =~ s/[\r\n]//g;
$new_dsn =~ s/^\s+$//g;
print "1 " . ($sm_debug_mode & 1 ? "y" : " ")
. " Simple debugging (PHP E_ERROR)\n";
print "2 " . ($sm_debug_mode & 512 ? "y" : " ")
- . " Moderate debugging (PHP E_ALL)\n";
+ . " Moderate debugging (PHP E_ALL without E_STRICT)\n";
print "3 " . ($sm_debug_mode & 524288 ? "y" : " ")
- . " Advanced debugging (PHP E_ALL plus log errors\n";
- print " intentionally suppressed)\n";
+ . " Advanced debugging (PHP E_ALL (without E_STRICT) plus\n";
+ print " log errors intentionally suppressed)\n";
print "4 " . ($sm_debug_mode & 536870912 ? "y" : " ")
- . " Strict debugging (PHP E_STRICT)\n";
+ . " Strict debugging (PHP E_ALL and E_STRICT)\n";
print "\n";
print "SquirrelMail debug mode (0,1,2,3,4) or d when done? : $WHT";
print CF "\$use_imap_tls = $use_imap_tls;\n";
# boolean
print CF "\$use_smtp_tls = $use_smtp_tls;\n";
+ # boolean
+ print CF "\$display_imap_login_error = $display_imap_login_error;\n";
# string
print CF "\$session_name = '$session_name';\n";
# boolean
# string
print CF "\$check_referrer = '$check_referrer';\n";
+ # boolean
+ print CF "\$use_transparent_security_image = $use_transparent_security_image;\n";
+
print CF "\n";
# boolean
projects / squirrelmail.git / blobdiff