Dev

dev@lists.roundcube.net

4296 discussions

Patch for imap.inc: Fixes #1483977 and #1483886
by Alexander Griesser 22 Nov '06

22 Nov '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks! I'm new to roundcubemail (just using it since yesterday) and today I found out, that passwords that contain german umlauts don't get authenticated correctly. After having a look at the sourcecode I found the file that contained the bug and it is located in imap.inc (iil_C_Login). Attached to this mail is a patch that fixes this issue, as well as the bugs #1483977 and #1483886. I know, that the imap library was taken from ilohamail and therefore I also informed the ilohamail mailing list about this issue and asked them to apply this patch too. The patch can also be downloaded here: http://tuxx-home.at/projects/roundcubemail/roundcubemail-loginumlauts.diff PS.: Please reply to me directly as I am not subscribed to the list. best regards, - -- | .-. | Alexander Griesser -- <private(a)tuxx-home.at> | .''`. | | /v\ \ http://www.tuxx-home.at/ / : :' : | | /( )\ | GPG-KeyID: 0xA2949B5A | `. `' | | ^^ ^^ `-------------------------------------------------' `- | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFGkNn66HVD6KUm1oRAvn/AJ0alB0K3Dc2kbW9s1Q3Pw2P9oczAACgnUYn mp4nD4FwqVEhwPilFMJZZhc= =sBPk -----END PGP SIGNATURE----- --- imap.inc.orig 2006-09-27 10:51:22.408713456 +0200 +++ imap.inc 2006-09-27 10:50:26.982139576 +0200 @@ -225,7 +225,9 @@ function iil_C_Login(&$conn, $user, $password){ - fputs($conn->fp, "a001 LOGIN $user \"$password\"\r\n"); + // $passwords needs to be utf8_decode'd so that the german umlauts don't + // get corrupted. Updated by php(a)tuxx-home.at, ag + fputs($conn->fp, "a001 LOGIN $user \"" . utf8_decode($password) . "\"\r\n"); do{ $line = iil_ReadReply($conn->fp);

10 15

Delete open email button in svn 380
by Marco Balmer 22 Nov '06

22 Nov '06

Hello In svn380 of roundcube I can not delete an open email message with firefox 2. Is that a bug or problem with my client? Thx /maba

4 7

Single mime part email
by Robin Elfrink 22 Nov '06

22 Nov '06

Hi, I have an email with a single mime part which looks like this (irrelevant headers removed): =========================================== Content-class: urn:content-classes:message X-MS-Has-Attach: yes MIME-Version: 1.0 Content-Type: application/vnd.ms-excel; name="Bureau CVL 06-10.xls" Content-Transfer-Encoding: base64 Content-Description: Bureau CVL 06-10.xls Content-Disposition: attachment; filename="Bureau CVL 06-10.xls" X-MS-TNEF-Correlator: X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAAQAAAAAAAAAA EAAAEgAAAAEAAAD+////AAAAAAAAAAD///////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// etc... =========================================== So basically it's a single mime part email. This usually does not happen with _normal_ MUA's, but MS Exchange seems not to care what the world thinks. Anyway, I fixed this one with attached patch, but I am not sure about any impact with other emails with or without attachments. I looked at about 50 different emails with and without attachments, from normal users and MS users, and I found no error so far. Would you people please take a look and see if this is fine? Robin Index: program/lib/mime.inc =================================================================== --- program/lib/mime.inc (revision 382) +++ program/lib/mime.inc (working copy) @@ -108,7 +108,7 @@ } //echo "s - part: $part rest: $rest array: ".implode(" ", $a)."<br>\n"; if (is_array($a[$part-1])) return $a[$part-1]; - else return false; + else return $a; }else if (($part==0) || (empty($part))){ return $a; } Index: program/steps/mail/func.inc =================================================================== --- program/steps/mail/func.inc (revision 382) +++ program/steps/mail/func.inc (working copy) @@ -983,6 +983,18 @@ } } + // message is single part non-text + else + { + if (($fname = $structure->d_parameters['filename']) || + ($fname = $structure->ctype_parameters['name']) || + ($fname = $structure->headers['content-description'])) + { + $structure->filename = rcube_imap::decode_mime_string($fname); + $a_attachments[] = $structure; + } + } + return array($a_return_parts, $a_attachments); }

1 0

Fw: [Full-disclosure] XSS in roundcube.com and users of it
by Chris Largret 22 Nov '06

22 Nov '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hey, I'm sure others have seen this as it's a couple days old now, but I'm just passing it along. It should have been sent to you guys first, but I don't see a reference on the dev list and it still works. - -Chris Begin forwarded message: Date: Sat, 11 Nov 2006 10:51:00 -0800 From: RSnake <h(a)ckers.org> To: full-disclosure(a)lists.grok.org.uk Subject: [Full-disclosure] XSS in roundcube.com and users of it There is an XSS vulnerability in roundcube webmail: http://demo.roundcube.net/?_task=');alert(%22XSS%22)// Btw, we've been posting 0-day XSS vulnerabilities at http://sla.ckers.org/forum/list.php?3 to take it out of the full disclosure list since lots of people don't want to see the sheer volume of reports. We've got close to a thousand companies and counting. We're just trying to cut down on the noise to people's inboxes. That is all. - -RSnake http://ha.ckers.org http://sla.ckers.org _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ - -- Chris Largret <http://www.largret.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iD8DBQFFYqBuyBrDZUqad5ERAnXiAJ0Tg2JFCHj2EDXfV+5O94HBQiqaEwCfWcSl Pk1XfZ72hbyNh1twaJI7Fec= =N4Z8 -----END PGP SIGNATURE-----

7 6

Database error (1f4)
by Jason Dixon 20 Nov '06

20 Nov '06

Sorry, I know this is a FAQ but I've checked everything four times and am starting to wonder if something else is amiss. I've checked that the credentials work fine from the command line. The configs are very similar to prior installations on different servers. This server is running MySQL-5.x, so I made sure to use mysql5.initial.sql, and used the proper CREATE DATABASE statement as listed in the INSTALL file. This server hosts a number of other applications using PHP5 and MySQL-5.x, so it shouldn't be a dependencies issue. [Mon Nov 20 19:42:08 2006] [error] PHP Notice: DB Error: extension not found in /home/www/roundcube-svn-373/program/include/bugs.inc on line 80 Any ideas? Thanks, -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net

1 1

Dupe bugs
by techlist 20 Nov '06

20 Nov '06

These seem to be dupes: Tickets #1456834 & #1483822 Tickets #1483926 & </trac.cgi/ticket/1483926>#1484015 </trac.cgi/ticket/1484015> -- Jay Lanstein Vice President Cantella & Co., Inc. 2 Oliver Street, 11th Floor Boston, MA 02109 (617)224-1426 - direct (617)521-8630 - office (617)521-8604 - fax The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this material from any computer. In accordance with industry regulations, all messages are retained and are subject to monitoring. This message has been scanned for viruses and dangerous content and is believed to be clean. Securities offered through Cantella & Co., Inc., Member NASD/SIPC. Home Office: 2 Oliver Street, 11th Floor, Boston, MA 02109 Telephone: (617)521-8630

2 1

Preview Pane
by Geoff Hasz 20 Nov '06

20 Nov '06

I applied your patch for the preview pane according to: http://lists.roundcube.net/mail-archive/roundcube.dev/2006/10/51/ When I view an email in the preview pane that has images. the images don't show and there is no options to view images as in the single email window. Is that known issue or is it my configuration? Also is there a way to resize the the pane so the pane is bigger than the email list even if its hard coded? Thanks Geoff

3 4

(no subject)
by Alexander Kravcenuk 20 Nov '06

20 Nov '06

unsubscribe

1 0

Ticket #1396158
by techlist 19 Nov '06

19 Nov '06

This bug seems like it should be closed out as it works fine in SVN 368. -- Jay Lanstein Vice President Cantella & Co., Inc. 2 Oliver Street, 11th Floor Boston, MA 02109 (617)224-1426 - direct (617)521-8630 - office (617)521-8604 - fax The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete this material from any computer. In accordance with industry regulations, all messages are retained and are subject to monitoring. This message has been scanned for viruses and dangerous content and is believed to be clean. Securities offered through Cantella & Co., Inc., Member NASD/SIPC. Home Office: 2 Oliver Street, 11th Floor, Boston, MA 02109 Telephone: (617)521-8630

1 0

dev+unsubscribe@lists.roundcube.net
by Jurgen Koster 18 Nov '06

18 Nov '06

unsubscribe

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev