- Dev - Roundcube mailing lists

Roundcube Webmail 1.1.0 released
by Thomas Bruederli 09 Feb '15

09 Feb '15

Dear subscribers We’re proud to announce the arrival of the next major version 1.1.0 of Roundcube webmail which is now available for download. With this milestone we introduce new features since version 1.0 as well as some clean-up with the 3rd party libraries: - Allow searching across multiple folders - Improved support for screen readers and assistive technology using WCAG 2.0 andWAI ARIA standards - Update to TinyMCE 4.1 to support images in HTML signatures (copy & paste) - Added namespace filter and folder searching in folder manager - New config option to disable UI elements/actions - Stronger password encryption using OpenSSL - Support for the IMAP SPECIAL-USE extension - Support for Oracle as database backend - Manage 3rd party libs with Composer In addition to that, we added some new features to improve protection against possible but yet unknown CSRF attacks - thanks to the help of Kolab Systems who supplied the concept and development resources for this. Although the new security features are yet experimental and disabled by default, our wiki describes how to enable the Secure URLs [1] and give it a try. And of course, this new version also includes all patches for reported CSRF and XSS vulnerabilities previously released in the 1.0.x series. IMPORTANT: with the 1.1.x series, we drop support for PHP < 5.3.7 and Internet Explorer < 9. IE7/IE8 support can be restored by enabling the ‘legacy_browser’ plugin which is part of the default package. See the complete changelog at http://trac.roundcube.net/wiki/Changelog and download the new packages from http://roundcube.net/download. The download packages come in two flavors: "dependent", which requires the manual installation of 3rd party libs using Composer and "complete", with all the required libraries already packed into the vendor directory and ready to run. Best, Thomas [1] http://trac.roundcube.net/wiki/Howto_Config/Secure_URLs

1 0

Re: [RCD] How to pass cookies or session from roundcube webmail to
by martijn.thie＠kpn.com 09 Feb '15

09 Feb '15

On Fri, Feb 6, 2015 at 11:26 PM, Avinash P <avinashp12015(a)gmail.com> wrote: > > Hi, > > I have to pass session or cookis from roundcube webmail to chat > > application for currently login users > > In order to get a sophisticated answer to your question, you should come up > with a more detailed description of what you're trying to do and what you > have so far. > > In general, session cookies are bound to the hostname but can be extended > to the entire domain using the $config['session_domain'] config option in > Roundcube. If the session cookie reaches the server of your chat application, > you can re-use Roundcube sessions by reading them from the same > database where Roundcube stores its data. But as said, if you expect a more > specific response, we need more details to help you. > > Kind regards, > Thomas In general I would say that you should never re-use sessions, but instead let the client setup separate sessions for each application. Re-using sessions can lead to a lot of problems. Most of the times, if you need information from another application, just use the API. My guess is that you want to re-use the authenticated account rather then you would re-use the session. If you're looking for single-sing-on functionality, you'll probably should build a plugin that hooks into the authentication functionality. There are several examples of those online. Please take a look at these links: http://trac.roundcube.net/wiki/Plugin_Repository http://trac.roundcube.net/browser/github/plugins/http_authentication/http_a… Regards, Martijn

1 0

How to pass cookies or session from roundcube webmail to other application
by Avinash P 07 Feb '15

07 Feb '15

Hi, I have to pass session or cookis from roundcube webmail to chat application for currently login users

2 1

plugins, composer and automatic_addressbook plugin
by Sébastien BLAISOT 02 Feb '15

02 Feb '15

Hi all, I'm proud to inform you that I finally found how to migrate the automatic_addressbook plugin from svn to git. The tricky part was the layout change somewhere back in the project's history as I didn't want to loose some of the commit history. Now as the git repo is clean and has all commit history, I published it on github and imported on roundcube's plugin repository. So I began to play with composer. When adding automatic_addressbook in my composer.json, I get it installed, but it installed me the dev-master branch. I thought that only published versions (tags) were installed unless specifically specified. What is the correct/prefferred way to tell composer to only install "stable" versions of a plugin ? regards, -- Sébastien 圣巴斯弟盎

2 1

Security update 1.0.5 released
by Thomas Bruederli 24 Jan '15

24 Jan '15

Dear Roundcube users We just released a security update to the stable version 1.0 of Roundcube webmail. Beside a recently reported Cross-Site-Scripting vulnerability, it also contains some bug fixes and improvements we found important for the long term support branch of Roundcube. The fixed XSS issue is documented here: http://trac.roundcube.net/ticket/1490227 See the full changelog here: http://trac.roundcube.net/wiki/Changelog It's considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from http://roundcube.net/download. And like always: backup before updating! Kind regards, Thomas

1 0

dino.blazeka@gmail.com is waiting for your reply. Respond?
by dino.blazeka＠gmail.com 27 Dec '14

27 Dec '14

Hi, dino.blazeka(a)gmail.com wants to follow you. ****** Is dino.blazeka(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.fliporamail.com/signup_e.html?fullname=&email=dev@lists.… If No please follow the link below: http://invites.fliporamail.com/signup_e.html?fullname=&email=dev@lists.… Follow the link below to remove yourself from all such emails http://invites.fliporamail.com/uns_inviter.jsp?email=dev@lists.roundcube.ne…

1 0

You have a new notification from dino.blazeka@gmail.com. View?
by dino.blazeka＠gmail.com 24 Dec '14

24 Dec '14

Hi, dino.blazeka(a)gmail.com wants to follow you. ****** Is dino.blazeka(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.infoaxe.net/signup_e.html?fullname=&email=dev@lists.roun… If No please follow the link below: http://invites.infoaxe.net/signup_e.html?fullname=&email=dev@lists.roun… Follow the link below to remove yourself from all such emails http://invites.infoaxe.net/uns_inviter.jsp?email=dev@lists.roundcube.net&am…

1 0

Update 1.0.4 released
by Thomas Bruederli 23 Dec '14

23 Dec '14

Dear Roundcube users We're proud to announce the next service release to the stable version 1.0 of Roundcube webmail. It contains a security fix along with some bug fixes and improvements for the long term support branch of Roundcube. The most important ones are: * Security: Fix possible CSRF attacks to some address book operations as well as to the ACL and Managesieve plugins. * Fix attachments encoded in TNEF containers (from Outlook) * Fix compatibility with PHP 5.2 See the full changelog here: http://trac.roundcube.net/wiki/Changelog It's considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from http://roundcube.net/download. And remember: backup before updating! Kind regards, Thomas

3 4

You have a new notification from dino.blazeka@gmail.com. View??
by dino.blazeka＠gmail.com 21 Dec '14

21 Dec '14

Hi, dino.blazeka(a)gmail.com wants to follow you. ****** Is dino.blazeka(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.info-emailer.com/signup_e.html?fullname=&email=dev@lists… If No please follow the link below: http://invites.info-emailer.com/signup_e.html?fullname=&email=dev@lists… Follow the link below to remove yourself from all such emails http://invites.info-emailer.com/uns_inviter.jsp?email=dev@lists.roundcube.n…

1 0

dino.blazeka@gmail.com has indicated you're a friend. Accept?
by dino.blazeka＠gmail.com 18 Dec '14

18 Dec '14

Hi, dino.blazeka(a)gmail.com wants to follow you. ****** Is dino.blazeka(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.infoaxe.net/signup_e.html?fullname=&email=dev@lists.roun… If No please follow the link below: http://invites.infoaxe.net/signup_e.html?fullname=&email=dev@lists.roun… Follow the link below to remove yourself from all such emails http://invites.infoaxe.net/uns_inviter.jsp?email=dev@lists.roundcube.net&am…

1 0

bug in 1.0 branch
by Cor Bosman 17 Dec '14

17 Dec '14

Hey all, the 1.0 branch has quite an annoying bug. If you email someone the following text in the body, rc will interpret it as a uuencoded message and make it a broken attachment. "foobar begin 2015 foobar2" This is fixed in 1.1 because of a seemingly/somewhat unrelated commit https://github.com/roundcube/roundcubemail/commit/48ba4414b33c8982f8232b06f… <https://github.com/roundcube/roundcubemail/commit/48ba4414b33c8982f8232b06f…> Is 1.1 around the corner, and if not, any idea if this could be fixed in 1.0? We have patched it locally because of customer complaints. Cor

2 1

Response on ticket #1489838 “separate mobile interface is needed”
by martijn.thie＠kpn.com 09 Dec '14

09 Dec '14

As a response on the ticket: #1489838 “separate mobile interface is needed” (http://trac.roundcube.net/ticket/1489838) First of all, I agree... Mobile/tablet interface should be there in the standard product, as a lot of people are more and more using tablets and mobiles as their primary device. About a solution... I guess one would first need to make a choice whether to implement Responsive Design in Larry or to select another template/theme based on the device-type using the user-agent string. Both solutions have advantages and drawbacks. Selecting a different template based on the device type, gives you the possibility to create separate functionality per device. Some functions should work a little different for a tablet then they should for a mobile device. So, in some cases that might require different javascript calls or so. The major drawback is, that you're always behind on supporting all devices. To stay compatible, it needs effort around the clock. On the other hand, Responsive Design is the choice for a future-ready template. It doesn't care about which device you are on, it just looks at the capabilities of the device and adapts the design along. It is a pure CSS solution. That is good, but that also means that you don't get to have separate functionality. The major drawback to Responsive Design is that the CSS structure can be harder to maintain. That all said... I have made a first attempt at enabling Responsive Design for the default Larry template. In about one day, I've succeeded to redesign the email screen for the most part. The boundaries I used for my attempt was to only use one CSS file to do it all. This one CSS file is simply added to the default CSS includes. The biggest problem that I faced, was that not all styling is done in a CSS file, but for some elements CSS is added directly to the element using the style attribute. In some cases I had to entirely corrupt the CSS of some elements to undo the CSS that was put into the style attribute. I’m not sure if and how attachments are processed by this mailinglist (as this is my first post), but I’ve attached a zip file containing the css. Also added three screenshots of the result on my Android device. The screenshots show the Dutch version of Roundcube, but it should give you an impression. In order to try it out and see how Responsive Design works, just add the css file (mystyle.css) to “root-of-roundcube/skins/larry” and add the following line to the “root-of-roundcube/skins/larry/includes/links.html”: <link rel="stylesheet" type="text/css" href="/mystyle.css" /> Reload the page in your browser and adjust the size of your browser window to a smaller width. Currently (for testing purpose) the width at which the Responsive Design kicks in is at 1111px. Please keep in mind that this is just a simple try-out from my part. It’s incomplete (at best) and the result of only one day of trying. A better result is possible by adding an additional javascript file for adjusting some html elements before the Responsive CSS kicks in. And an even better result can be get by removing the style attributes from the HTML and adjusting the HTML of Larry in small ways to better adopt smaller windows. Regards, Martijn

3 7

Help needed
by Chris Simon 04 Dec '14

04 Dec '14

Hey, If this has already been posted, i'm sorry, but the mailinglist isn't posting my questions and i don't get any verification that it has been posted (although that option is enabled in the mailinglist manager page) I need some help developing my own plugin. The basic functionality of the plugin is already working, but it currently lacks advanced settings. I already have some basic settings, but to go more advanced, i wopuld like to add a third column in the settings page between te normal settings column (the small left one) and the actual settings (the big white one on the right) just like the column when you choose identities (where the different identities are listed) or responses (where the different responses are listed) Can someone provide me with some help as how to make this?? With kind regards, Chris

3 4

PDF attachment not shown as attachment
by Michael Heydekamp 18 Nov '14

18 Nov '14

I received a message with a PDF attachment of 20 MB which isn't shown as attachment in the message list (the paper clip icon is missing). Looking at the source of the message, the structure looks like this: ------------------------------------------------------ > Content-Type: multipart/alternative; boundary="Apple-Mail=_E26C74AC-94C5-415E-BA83-E2830C22D7E4" [... now the body: ...] > --Apple-Mail=_E26C74AC-94C5-415E-BA83-E2830C22D7E4 > Content-Transfer-Encoding: quoted-printable > Content-Type: text/plain; > charset=utf-8 [... Text part ...] > --Apple-Mail=_E26C74AC-94C5-415E-BA83-E2830C22D7E4 > Content-Type: multipart/mixed; > boundary="Apple-Mail=_BD2C8A48-FD16-4995-B226-8C85EEDEA387" > --Apple-Mail=_BD2C8A48-FD16-4995-B226-8C85EEDEA387 > Content-Transfer-Encoding: quoted-printable > Content-Type: text/html; > charset=utf-8 [... HTML part ...] > --Apple-Mail=_BD2C8A48-FD16-4995-B226-8C85EEDEA387 > Content-Disposition: inline; > filename="Nordkap Recall Teil 1.pdf" > Content-Type: application/pdf; > x-mac-hide-extension=yes; > x-unix-mode=0644; > name="Xxxxxxx Xxxxxx Teil 1.pdf" > Content-Transfer-Encoding: base64 [... b64-encoded attachment ...] > --Apple-Mail=_BD2C8A48-FD16-4995-B226-8C85EEDEA387 > Content-Transfer-Encoding: quoted-printable > Content-Type: text/html; > charset=utf-8 [... another HTML part (?!) ...] > --Apple-Mail=_BD2C8A48-FD16-4995-B226-8C85EEDEA387-- > --Apple-Mail=_E26C74AC-94C5-415E-BA83-E2830C22D7E4-- ------------------------------------------------------ Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

2 4

Managesieve plugin vacation
by Dino Blazeka 18 Nov '14

18 Nov '14

Hello everyone. I've posted my question to the forum but no one answered so I'll try with this mailing list. I want to know if there is any way to make vacation part of managesieve plugin write it's contents to an arbitrary sieve script. BG: In our system sieve rules are complex and are divided in many scripts. Main script which is always active just includes all other scripts. I do not want Managesieve plugin writing into it. I want it to write into the script named in the config, if possible. Thank you for your advice

1 0

managesieve vacation
by Lorenzo Petracchi 15 Nov '14

15 Nov '14

Hello. In managesieve plugin, config.inc.php, I have enabled separate management interface for vacation responses (out-of-office) by setting this: $config['managesieve_vacation'] = 1 Now I need to insert in every script this code: if allof ( not exists ["list-help", "list-unsubscribe", "list-subscribe", "list-owner", "list-post", "list-archive", "list-id", "Mailing-List"], not header :comparator "i;ascii-casemap" :is "Precedence" ["list", "bulk", "junk"], not header :comparator "i;ascii-casemap" :matches "To" "Multiple recipients of*" ) In this way when a user receive a mail from a list the mail-from address never receive back the vacation message, and this is what my organization need. We need this feature before leaving our old horde-imp webmail, where I was able to activate this option. Does anybody knows how may I do this? Lorenzo

1 1

Two issues with IE8 and git-master
by Michael Heydekamp 15 Nov '14

15 Nov '14

I'm not using IE8 that often anymore, but from time to time I can't avoid it. Two issues I do currently remember: 1) Although my default setting is top posting, the signature is placed at the bottom of the message. The cursor is placed at the top, though. With FF all is OK. 2) When I want to open a PDF attachment, the browser often (always?) hangs. I believe this issue had been discussed already...? If more details required, please ask. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

2 2

Roundcube Webmail 1.1-beta available
by Thomas Bruederli 10 Nov '14

10 Nov '14

Hello folks We’re proud to announce that the beta release of the next major version 1.1 of Roundcube webmail is now available for download and testing. With this milestone we introduce a bunch of new features and some clean-up with the 3rd party libraries Roundcube uses: - Allow searching across multiple folders - Improved support for screen readers and assistive technology using WCAG 2.0 andWAI ARIA standards - Support images in HTML signatures (copy & paste) - Added namespace filter and folder searching in folder manager - New config option to disable UI elements/actions - Stronger password encryption using OpenSSL - Support for the IMAP SPECIAL-USE extension - Support for Oracle databases - Moved 3rd party libs to vendor directory, managed by Composer And of course plenty of small improvements and bug fixes. IMPORTANT: with this version, we dropped support for PHP < 5.3.7 and Internet Explorer < 9. IE7/IE8 support can be restored by enabling the 'legacy_browser' plugin. See the complete Changelog at http://trac.roundcube.net/wiki/Changelog and download the packages from http://roundcube.net/download. Please note that this is a beta release and we recommend to test it on a separate environment. And don’t forget to backup your data before installing it. Best, Thomas

1 0

IMAP ID Bug found in Roundcube 1.0.1 in rcube_imap.php
by Benoit Panizzon 07 Nov '14

07 Nov '14

Hello I habe been desperately trying to get Roundcube to send the correct REMOTE_ADDR of the connecting client to a dovecot IMAP Server which supports remote IP logging by x-originating-ip ID command and login_trusted_networks setting. As google shows, that not only I had this problems, I share the solution and hope one of the developers reading here could submit that small fix: Here are the changes needed for it to work rcube_imap.php, define the ident option not only if debugging is enabled, and add x-originating-ip to the array. if ($this->options['debug']) { $this->set_debug(true); } // <= Added $this->options['ident'] = array( 'name' => 'Roundcube', 'version' => RCUBE_VERSION, 'php' => PHP_VERSION, 'os' => PHP_OS, 'x-originating-ip' => $_SERVER['REMOTE_ADDR'], // <=Added 'command' => $_SERVER['REQUEST_URI'], ); // } Now this works as expected and dovecot (including it's post-login script) are getting the IP of the connecting webbrowser and not the one of the webserver, if the webserver's IP is in login_trusted_networks. Benoit Panizzon -- I m p r o W a r e A G - ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 07 CH-4133 Pratteln Fax +41 61 826 93 02 Schweiz Web http://www.imp.ch ______________________________________________________

5 17

Using javascript from message hooks
by Sergio Carrasco Mayans 03 Nov '14

03 Nov '14

Hello, I tried sending a question through nabble but it seems there's a problem since it states it isn't accepted even though i'm already registered (and it doesn't show in history, so I think it won't be duplicated). I've been using command events, but i'm not able to find out how to use it from a message hook. What I have right now is first a hook to 'message_part_after' and I want to call a command from inside the called function (the call to the function is correct since it raises a flag I've put there). In other places I use $this->rcmail->output->command rcmail being a rcmail::getinstance, but this doesn't seem to work here (I have an error in the javascript console stating that rcmail.functionname is not a function). I also tried output directly, but to no avail. Is something changed when calling commands from the showing a mail action? The js was included through $this->include_script in the beginning of my php. All the examples I've found in plugins are more of a command in a button, not directly executing the script from the read message action. Right now I'm using directly a script inside the php, but I'd like to know how to call the event. -- Sergio Carrasco Mayans http://www.derechonntt.com http://www.lawandit.net sergioc(a)derechonntt.com

1 0

x-sender
by Cor Bosman 31 Oct '14

31 Oct '14

Hey all, it seems that with return receipts messages there is no x-sender header. Is that on purpose? Cor

3 4

Fetching custom message headers in message list view
by hyukudan 30 Oct '14

30 Oct '14

I've been searching the archive here and other plugins for help on how to fetch custom headers in the message list view, and I must have misunderstood something, because I can't read it (only in the message view). What I've been doing is: - I add a hook after the plugin init function, calling storage_init $this->add_hook('storage_init', array($this, 'storage_init')); - I use fetch headers to retrieve the 'checking' header function storage_init($p) { $p['fetch_headers'] = trim($p['fetch_headers'].'Checking'); return $p; } If I now print all the data coming from the mail, this header isn't shown, only the usual headers (from, cc, cco). Any help on what i'm missing here? -- View this message in context: http://roundcube-webmail.10982.n7.nabble.com/Fetching-custom-message-header… Sent from the Development mailing list archive at Nabble.com.

4 4

doubleclick in list view and editor enter preference
by Brendan 27 Oct '14

27 Oct '14

we have a large number of users using roundcube now, and two complaints kept coming up again and again: - users wanting to be able to single-click to open messages when in the message list view with the preview pane disabled - users not liking the behavior of the enter key in the HTML editor (setting a new paragraph instead of a newline) both of them can't be "fixed" for everyone, as a fixing it for one group (the ones who complain) breaks it for the other group (those who like it as is). instead i've implemented them locally as new per-user config options, allowing the users to override the default behavior for each. as both needed some changes to some of the javascript files they aren't suitable candidates for simple plugins. are these two options things that would be of use to the general project? if so, i'll submit a couple enhancement tickets with pull requests with the changes for them. (i'm fuzzy on how this type of feature enhancement should be handled) for the single-as-double click option, when it is enabled (disabled by default) shift/ctrl-clicking still selects messages, single clicking just switches from selecting the message to opening the message. for the html editor enter behaviour, when it is enabled (disabled by default) the behavior of the enter key switches: enter adds a newline and shift-enter adds a new paragraph (the inverse of how it is now). via this tinymce option: http://www.tinymce.com/wiki.php/Configuration:forced_root_block

1 0

plugin request
by Matee Moshkovits 26 Oct '14

26 Oct '14

is their an auto collect/auto fill/auto add plugin for the address book to roundcube? like the one gmail or thunderbird has ...where if you compose an email to someone it auto adds them to your address book ... then once you start to type the start composing it suggest the addresses to fill in .... -- If you have any questions, please do not hesitate to contact our office. Thank You Matee Moshkovits Chief Technology Officer AffordHost Inc. Direct Telephone: (416)273-9914 Office Telephone: (416)238-7698 x 225 Email: mmmoshko(a)affordhost.com Business-Class Web Hosting at Affordable Prices

2 1

Support for extprograms in filter rules
by Svoop 25 Oct '14

25 Oct '14

Hi I'm using a few pipe rules (see http://wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/Extprograms). However, these rules are not shown in Roundcube and - since Roundcube fully regenerates the roundcube.sieve file - they are lost whenever other filters are edited in Roundcube. How about adding support for extprograms to Roundcube? IMHO, there should be a config setting to enable or disable (default) this feature. And it could be limited to the pipe command for starters. What do you think?

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev