X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=ChangeLog;h=75a06e2f5c933368e34399ea81fb244f1cf0391f;hp=82068bb199cc01d4ec59125336bc49c6650576ca;hb=4766fd60ec1d09534a2a234b23631f2d81248a34;hpb=a3a520911162e056313d9d634e020fc12c547836 diff --git a/ChangeLog b/ChangeLog index 82068bb1..75a06e2f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -7,13 +7,13 @@ Version 1.5.1 -- CVS - New reply citation to include date and author. - Security: Fix some possible XSS bugs. - Norwegian Bokmal translation uses nb_NO. - - Integrated Msg_Flags plugin - turn on/off icons using configuration tool, menu - number 11 (Tweaks), option number 3, after which users must select an icon - theme in Options/Display Preferences. "Flag"/"Unflag" buttons are implemented - as separate plugin. + - Integrated Msg_Flags plugin - turn on/off icons using configuration tool, + menu number 11 (Tweaks), option number 3, after which users must select an + icon theme in Options/Display Preferences. + "Flag"/"Unflag" buttons are implemented as separate plugin. - Added Farsi and Tagalog translation support. - Enabled Ukrainian and Russian-Ukrainian support - - Subfolders named "foo.inbox" didn't always work well. Fixed. + - Fixed subfolders named "foo.inbox" didn't always work well. - sqimap_create_stream() was not obeying passed params properly. - Fix non-selectable inbox. - Add src/configtest.php script which checks for common errors in the config. @@ -32,8 +32,8 @@ Version 1.5.1 -- CVS - Added option to suppress Received: line in outbound SM headers (#847107). - Changed read_body header from links to buttons (looks like message index). - Add functions for building HTML forms (functions/forms.php). - - Moved javascript_on to session (from prefs). Centralized javascript detection - in prefs.php method checkForJavascript. + - Moved javascript_on to session (from prefs). Centralized JavaScript + detection in prefs.php method checkForJavascript. - Added abook_init and abook_add_class hooks. - Fixed "Resume Draft" to continue using selected identities (#845290). - Fixed RFC2821 incompliancy by adding a fallback mechanism to HELO if @@ -45,7 +45,7 @@ Version 1.5.1 -- CVS still be performed on message delete, etc. - Allow single quotes to be used in theme name in conf.pl (#805309). - Fixed on the fly decoding of base64 encoded attachments. - - Fixed message rejects by the postfix sendmail wrapper when attachments were + - Fixed message rejects by the Postfix sendmail wrapper when attachments were involved. - Fixed date display bug for messages of today. Show short format in case of long format. (only occurs in the timeframe around 0:00 AM till @@ -63,6 +63,9 @@ Version 1.5.1 -- CVS - Added sort by message size. - Security: Fixed XSS vulnerability in content-type display in the attachment area of read_body.php discovered by Roman Medina. + - Removed src/move_messages.php, move_before_move and move_messages_button_action + hooks. Mailbox listing actions should be handled by src/right_main.php and + functions/mailbox_display.php hooks. - Get alternating row colors of addressbook in sync with mailbox list. - Give proper error when PEAR DB not found. - Remove inappropriate strip_tags() from add-to-addressbook (#968475). @@ -75,11 +78,12 @@ Version 1.5.1 -- CVS - Custom option page values now repopulate correctly - Added "no focus" option for compose page in display preferences (setting reply focus to "No focus" also affects composing new messages) - - Current hook name is now globally available when running a hook ($currentHookName) + - Current hook name is now globally available when running a hook + ($currentHookName) - Fix bug when Saving to Draft folder that contains special characters. - - Added size limit to signatures saved in file backend. Created error_option_save - function, that allows sending error message to options page. Thanks to Martynas - Bieliauskas for spotting big signature "option". + - Added size limit to signatures saved in file backend. Created + error_option_save function, that allows sending error message to options + page. Thanks to Martynas Bieliauskas for spotting big signature "option". - Make SquirrelSpell work with safe_mode enabled, if using PHP >=4.3.0. Patch by Ray Ferguson. - Make IP-address in Message-ID RFC822 compliant. @@ -102,10 +106,10 @@ Version 1.5.1 -- CVS - Fixed $custom_css loading in squirrelspell plugin. - Turkish translation uses C character case conversion rules. Fixes PHP and SquirrelMail functions are assume English conversion rules. - - Fixed problem that caused an error when deleting all messages on the last page - of a paginated view (provides fix for #1014612) + - Fixed problem that caused an error when deleting all messages on the last + page of a paginated view (provides fix for #1014612). - Added MySQL password/UNIX crypt support to mysql backend in the - change_password plugin + change_password plugin. - Make SMTP Authentication detection in conf.pl more RFC-compliant. - Fixed IMAP errors when using mail_fetch plugin to auto-fetch on login. - Fixed folder list in Create Folders list for Courier (properly skip INBOX). @@ -128,12 +132,12 @@ Version 1.5.1 -- CVS - LC_NUMERIC locale is set to C. (workaround for #1027130). Some plugins might use decimal delimiters incorrectly. - Added sq_is8bit function that can be used to detect 8bit strings. - - Added sq_mb_list_encodings function that provides list of encodings supported - by PHP mbstring module. + - Added sq_mb_list_encodings function that provides list of encodings + supported by PHP mbstring module. - Added Content-Transfer-Encoding: 8bit header for read receipts that contain 8bit symbols. (provides fix for #934033). - - Fixed decoding function problems when mbstring.func_override has MB_OVERLOAD_REGEX - enabled. + - Fixed decoding function problems when mbstring.func_override has + MB_OVERLOAD_REGEX enabled. - Security: Fixed XSS exploit in decodeHeader function. [CAN-2004-1036] - Added site configuration and custom translation engine support to translate plugin. @@ -142,8 +146,8 @@ Version 1.5.1 -- CVS a string (patch courtesy Maurice Makaay). - Fixed PHP notice when header property value is blank. - Added compact paginator option. Patch by Felix Egli. - - Fixed reply/forward form in order to avoid warnings in SSL enabled sites. Patch - by Felix Egli. + - Fixed reply/forward form in order to avoid warnings in SSL enabled sites. + Patch by Felix Egli. - Removed command line option unsupported by qmail-inject in class/deliver/Deliver_SendMail.class.php. Thanks to Ken Brush. - Global file based address book is controled in configuration. Removed @@ -156,19 +160,20 @@ Version 1.5.1 -- CVS supported by mbstring and use it. Fixes bug #1005353. - LDAP backend will use internal SquirrelMail charset conversion functions instead of PHP XML extension. Fixes bug #655137. - - Added Wood theme and Silver Steel theme by Pavel Spatny and Simple Green theme + - Added Wood and Silver Steel themes by Pavel Spatny and Simple Green theme. - Fix two time zone calculation bugs, thanks to David White. Fixes #1063879. - 'Priority' and 'Importance' headers are now also recognised, next to the 'X-Priority' header that we've supported since a long time. Fixes #1039935. - Handle a reload of the signout page gracefully: do not present an error about having to be logged in to be able to sign out. Fixes #1070069. - - Prevent & being eaten in set_url_var, thanks Marcin Orlowski. Fixes #1053725. + - Prevent & being eaten in set_url_var, thanks Marcin Orlowski (#1053725). - Removed internal_link hook. - Added sq_setlocale function in order to use multiple locale names. - Set up language before outputing errors in signout.php to make them appear in the correct language. - Added size attributes to new_mail sound tags. Fixes #818958. - - Removed extra ; in SquirrelMail added Received header per RFC 822. Fixes #1088548. + - Removed extra ; in SquirrelMail added Received header per RFC 822 + (#1088548). - Add IMAP server type "hmailserver" to make search work with hMailServer. Fixes #1085377. - Reuploaded newmail plugin sounds. Fixes files uploaded to cvs without binary @@ -192,13 +197,11 @@ Version 1.5.1 -- CVS - Fix undefined variables in src/webmail.php. - 24hr clock format should include a leading 0. - Removed numeric keys for plugin array in config.php. - - Fixed translations of "On DATE, AUTHOR said" and "AUTHOR said" replies. + - Fixed translations of "On DATE, AUTHOR Wrote" and "AUTHOR Wrote" replies. - Added sq_str_pad function for padding of multi-byte strings. - Added sq_strlen function for calculation of multi-byte string length. - Quoted "INBOX" in check for the status of INBOX in a LIST call. Fixes an issue with a specific IMAP server. - - In sqgetGlobalVar(), reset $value if the var is not found in the - specified location. - Move default_pref to the config/ dir, but keep checking legacy locations first for bc. Do not fail with an error when default_pref not found, just create an empty one. @@ -213,10 +216,10 @@ Version 1.5.1 -- CVS - Use the proper attachment filenames in case of forwarding a message. - Fix for #855320 where Outlook Express was creating CID: based URLs, but not assigning a content-id to the attachment. This is a bug in - Outlook Express and is non-RFC compliant behaviour. + Outlook Express and is non-RFC compliant behaviour. - Strip tags out. This is a Microsoft only protocol and references files local to the sending machine. This causes issues - with Internet Explorer. + with Internet Explorer. - Replace links with clean images to stop issues with Internet Explorer not being able to track down the image. - Empty src attribute on img tags causes logouts (IE only), replacing @@ -237,17 +240,17 @@ Version 1.5.1 -- CVS is always INBOX. - Always show Purge link next to Trash, even when empty. - errors in addressbook_init() function are no longer fatal. If function - fails to activate address book backend, it displays error box (with + fails to activate address book backend, it displays error box (with error_box() function). error box can be hidden by setting first function argument to false. - - Sanitized search in ldap address book backend. Use of asterisk + - Sanitized search in ldap address book backend. Use of asterisk together with other symbols is not supported. - Added ldap backend to change_password plugin. - Change defaults of some prefs to more sensible / usable settings. - Revise the documentation of the packaged plugins. - Fixed edit form checks in address listing (#1124018). - After sending resumed draft, return to message list. - - Parse and replace mailto: links with internal compose links when + - Parse and replace mailto: links with internal compose links when viewing in HTML format. - Plugins may now define an "extra" array element to return to the attachment types hook, which will be also inserted in the attachment link for the @@ -273,9 +276,131 @@ Version 1.5.1 -- CVS - Strip position:absolute style from HTML mails. - Add ability to the Filters plugin to filter on Message Body, or both the Headers and the Message Body. - -Version 1.5.0 --------------------- + - Update the message copy and move functions to allow for error handling. + - Fix the filter plugin from halting the login process when copying errors + occur. + - Clean up the folder management (create, rename, subscribe) code. + - Added filtering support to address book LDAP backend (#539534). Thanks + to Tim Bell. + - Added domain scope limit controls to address book LDAP backend. Issue + is specific to Microsoft ADS (#1035454). Thanks to Michael Brown. + - Missing PHP LDAP extension errors are now handled by ldap backend and + errors are displayed after address book initialization. + - LDAP connections are opened during search and not during address book + initialization. + - Fixed wrapping of multibyte strings in message view and replies + (#1043576). + - mbstring internal encoding is switched to ASCII, if mbstring.func_overload + is enabled (#929644). + - Fixed checking for quota when appending to Sent folder (#1172694). + - Create a generic function to empty a folder tree, thanks to + Randy Smith (#1145578). + - Add robots noindex/nofollow meta tag to SquirrelMail generated pages. + - Fix incorrect folder hierarchy display (#1009654), thanks + Awais Ahmad for the patch (#1082558). + - src/delete_message.php script is disabled. It provided functions that + could be implemented without playing with multiple redirects. + - Remove lots of obsoleted code from left_main.php. + - Partial support of IMAP REFERRAL: do not fail on IMAP REFERRAL response + (RFC 2221) but log the user out with a hint. Patch by Ariel Arjona + (#1006242). + - Fixed SquirrelMail language cookie detection in php register_globals=off. + - If default SquirrelMail language is set to empty string, interface will + try to follow browser's HTTP_ACCEPT_LANGUAGE header or fallback to en_US + (#764709). + - If From: field is unset in an email, header object for from field is not + correctly set, and generates an error on reply (#1179754). + - Add Cancel button to addressbook (#1180565). + - RFC 2046: Send mixed messages with multipart/alternative nested boundaries + with correct boundary strings. + - EXPERIMENTAL: Mailbox listing converted to templated layout. Added + template support functions and classes. Rewrote some page header and + mailbox listing functions. Disabled 'show_recipient_instead' option. + Added more columns to mailbox listing and index order options. + - Removed sort by internal date option. Now you can use the Received column + in the index order option page for that. + - WARNING: if same user data storage location is used to store SquirrelMail + 1.4.x and 1.5.1+ user settings, SquirrelMail 1.5.1+ will reset mailbox + display order (Options->Index Options) in stable. Backup your data before + testing 1.5.1+ or use different storage location. + - Added experimental iframe sandbox for display of html formated emails. + - Disabled LOGINDISABLED check in src/login.php when IMAP server mapping is + used. + - Check destination folder in mail_fetch plugin before storing messages + in it. Modify destination folder, if it is renamed or deleted within + SquirrelMail (#584658). + - Made the Flags column a required column in the index order options page to + prohibit missing seen/unseen info in the messages list. + - Fixed disabled prev/next links in the message display when you reach the + end of the page (message set). + - Moved delete button to the right in the message list. + - Fixed imap capability detection in bug_report plugin. It was broken + when IMAP TLS was enabled or imap server mapping was used. + - Added mail_fetch plugin configuration file and moved plugin functions + from setup.php to functions.php file. + - SquirrelSpell plugin was modified to use standard SquirrelMail + preference system. User dictionaries that are stored in $username.words + files should be automatically updated to new format, when user logs in. + Fixed possible php script errors caused by $SQSPELL_APP configuration + variable changes. Removed $SQSPELL_EREG configuration option. Plugin's + version increased to 0.5. + - $skip_SM_header option was replaced with $encode_header_key and + $hide_auth_header options. First option allows to encode user's information + with provided encryption key (set in 2. Server settings -> B. Update SMTP / + Sendmail settings). Second option allows to disable authenticated user part + in Received: header, when user can't force used email address. It is set in + 4. General Options -> 9. Allow editing of identity. + - Added dovecot preset to configuration utility. + - Modified mercury32 preset in order to remove INBOX prefix in mercury32 4.01. + - Added peardb backend to change_password plugin. + - Tweak IMAP connection error display (#1203154). + - Gracefully recover from over quota error while sending a mail (#1145144). + - Fix get_identities() for the case where the user has not set an email + address: use the fallback $username@$domain that's used in compose aswell. + - Fix "Include me in CC on Reply All" for the case where email address was + not set in the prefs (#781202, #1093363). + - Move documentation for SquirrelMail developers to doc/Development. + - Added id attribute support to form functions. It can be used for Section + 508 or WAI fixes. Original idea and patch by dugan passwall.com. + - Fixed broken attachments caused by inconsistency of PHP chunk_split(). + Thanks to Roalt Zijlstra. + - Identity code was not checking for domain part in username before setting + email address (Bug #1219184). + - Disallow access to the administrator plugin screens when the plugin is + not enabled in the config. + - Security: fix several cross site scripting (XSS) attacks. Thanks go to + Martijn Brinkers for finding a lot of these. [CAN-2005-1769] + - Update COPYING with new address of the FSF. + - Fixed missing quote character when trying to build cid: urls. + - Added address listing functions and listing controls to address + book LDAP backend. Blocked wildcard searches in file and database + backends when listing is disabled (#529563). + - Some LDAP address book backend configuration options (listing + controls, filtering, scope limit) are moved to 'advanced + configuration' subsection. + - Javascript relied on rg=1 in the login page to force focus to + password box if username was supplied as a url arg (#1222617). + - Fix variable typo in parseFetch which caused IMAP errors on Exchange. + Thanks Christian Froemmel. + - Added Bluesome theme by Saku Lehtiö (#1188209). + - Rewrite of advanced identity handlying to remove stupid extraction + of all post variables. [CAN-2005-2095] + - Added StartTLS support to address book LDAP backend (#1197703). Patch + by John Lane. + - Added subtree/one level search options to address book LDAP backend + (#1212618). + - Added Simple Green 2 and Simple Purple themes by Vicky Pyne (#1217066 + and #1217069). + - sqimap_messages_delete|copy|flag and sqimap_get_small_header() + functions are removed from SquirrelMail IMAP API. Use sqimap_msgs_* + and sqimap_get_small_header_list() functions instead. + - Fix for bad cache on massive expunge/delete/move operations. + - Moved time zone configuration from locale/timezones.cfg to php array. + Adds time zone name localization options and fixes problems on systems + that don't support GNU C time zone mappings. + +Version 1.5.0 - 2 February 2004 +------------------------------- - Added new preference that determines cursor focus when replying - Added support in conf.pl for MS cls command. - conf.pl changes for relative paths outside the SM tree (#715119). @@ -888,7 +1013,7 @@ Version 1.0.2 -- February 8, 2001 - Better escaped string handling from POST variables - Many more code cleanups and optimizations - Added Hungarian translation by Teemu Junnila - - Added Icelandic translation by Karl Heiðar + - Added Icelandic translation by Karl Hei�r - Updated Taiwan translation - Updated Swedish translation - Updated Finnish translation