Dev

dev@lists.roundcube.net

1 participants
4293 discussions

RoundCube version 0.2-alpha is out
by Thomas Bruederli 11 Jun '08

11 Jun '08

Hi everybody, After refactoring some backend code we finally put a working copy of RoundCube Webmail together again. This preview release of version 0.2 comes up with an all-new HTML sanitization function (written by Frédéric Motte) which removes malicious JavaScript code from HTML messages and fixes all known XSS vulnerabilities. Beside that we also fixed more than 100 bugs and improved both speed and stability. Special thanks go to Alec, who spent many hours with fixing bugs and improving features. With this release RoundCube finally drops support for PHP4 so update your PHP to 5.2 or greater before installing the new version. The new version can be downloaded from our website: http://roundcube.net/downloads or from http://sf.net/projects/roundcubemail/ Have fun! ~Thomas _______________________________________________ List info: http://lists.roundcube.net/dev/

4 6

Plugins backend - step 1
by A.L.E.C 11 Jun '08

11 Jun '08

I think it would be good start for plugins API to get rid of hardcoded actions from index.php. So, we have such code: // include task specific files if ($RCMAIL->task=='mail') { include_once('program/steps/mail/func.inc'); if ($RCMAIL->action=='show' || $RCMAIL->action=='preview' || $RCMAIL->action=='print') include('program/steps/mail/show.inc'); ... My proposition is to create file for each action (filename = actionname) in tasks directories, and then we have: foreach(array('plugins', 'steps') as $dir) if (file_exists('program/'.$dir.'/'.$RCMAIL->task.'/'.$RCMAIL->action.'.inc')) { @include_once('program/'.$dir.'/'.$RCMAIL->task.'/_init.inc'); // init actions (renamed func.inc) @include_once('program/'.$dir.'/'.$RCMAIL->task.'/'.$RCMAIL->action.'.inc'); @include_once('program/'.$dir.'/'.$RCMAIL->task.'/_destroy.inc'); // post actions break; } plugins directory it's just for possibility to overwrite built-in action with plugin action. -- Aleksander 'A.L.E.C' Machniak http://alec.pl gg:2275252 LAN Management System Developer http://lms.org.pl Roundcube Webmail Project Developer http://roundcube.net _______________________________________________ List info: http://lists.roundcube.net/dev/

6 9

Updated French translation
by Maximilien Cuony 10 Jun '08

10 Jun '08

Hi, I know, I'm not an official translator for french, but it's ugly to have English mixed with French on the 0.2-alpha so I updated myself the files ;) Regards, -- Maximilien Cuony [The_Glu] http://theglu.org --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/np/9mU6FwuX/labels.inc http://detached.gigo.com/rc/np/9mU6FwuX/messages.inc Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

HTTP Auth patch
by Ryan Roth 09 Jun '08

09 Jun '08

I have seen a couple of patches that allow you to reuse http auth for roundcube but both are out dated. I have updated the newer of the two to work with the current SVN ( http://trac.roundcube.net/ticket/1485076 ). Can we get this included with the main development branch so that it is an official feature? Thanks _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

Updated Catalan translation
by Roger Pueyo Centelles 07 Jun '08

07 Jun '08

--- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/96/nBgdSkWW/messages.inc http://detached.gigo.com/rc/96/nBgdSkWW/labels.inc Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

Log logins
by Robin Elfrink 06 Jun '08

06 Jun '08

Hi all, For various reasons I need to know who logged into RoundCube when and from where. I can't imagine any other admin not wanting to know, and I don't understand how I got to run RoundCube for so long without knowing :) I'd like to propose something like this: --- index.php (revision 1480) +++ index.php (working copy) @@ -86,6 +86,10 @@ // send auth cookie if necessary $RCMAIL->authenticate_session(); + // log successful login + if ($RCMAIL->config->get('debug_level') & 1) + console(sprintf('Successful login for %s from %s', trim(get_input_value('_user', RCUBE_INPUT_POST), ' '), $_SERVER['REMOTE_ADDR'])); + // send redirect header("Location: {$RCMAIL->comm_path}"); exit; This results in a line like this in logs/console: [06-Jun-2008 10:08:45 +0200]: Successful login for robin (id 8) from 16.35.94.15 Robin _______________________________________________ List info: http://lists.roundcube.net/dev/

3 3

attachments with national characters
by A.L.E.C 06 Jun '08

06 Jun '08

There're problems with attachment names in parts without charset specification. Example message can be found here http://trac.roundcube.net/ticket/1484969 I think we have two solutions: 1. Check charset of first (all) part(s) of message and convert filename according to it, but what when there's no charset data? 2. Detect charset using ie. mb_detect_encoding(). Here's a patch for 2. diff -ruN rc-beta3/program/include/rcube_imap.php rc-beta2/program/include/rcube_imap.php --- rc-beta3/program/include/rcube_imap.php 2008-06-06 10:20:39.672800689 +0200 +++ rc-beta2/program/include/rcube_imap.php 2008-06-06 09:39:49.031952834 +0200 @@ -1159,10 +1159,13 @@ if (is_array($part[8]) && empty($struct->parts)) $struct->parts[] = $this->_structure_part($part[8], ++$count, $struct->mime_id); } - + // normalize filename property if ($filename_mime = $struct->d_parameters['filename'] ? $struct->d_parameters['filename'] : $struct->ctype_parameters['name']) - $struct->filename = rcube_imap::decode_mime_string($filename_mime, $this->default_charset); + { + $struct->filename = rcube_imap::decode_mime_string($filename_mime, + $struct->charset ? $struct->charset : rc_detect_encoding($filename_mime, $this->default_charset)); + } else if ($filename_encoded = $struct->d_parameters['filename*'] ? $struct->d_parameters['filename*'] : $struct->ctype_parameters['name*']) { // decode filename according to RFC 2231, Section 4 @@ -1170,7 +1173,8 @@ $struct->filename = rcube_charset_convert(urldecode($filename_urlencoded), $filename_charset); } else if (!empty($struct->headers['content-description'])) - $struct->filename = rcube_imap::decode_mime_string($struct->headers['content-description'], $this->default_charset); + $struct->filename = rcube_imap::decode_mime_string($struct->headers['content-description'], + $struct->charset ? $struct->charset : rc_detect_encoding($struct->headers['content-description'],$this->default_charset)); return $struct; } diff -ruN rc-beta3/program/include/rcube_shared.inc rc-beta2/program/include/rcube_shared.inc --- rc-beta3/program/include/rcube_shared.inc 2008-06-06 10:20:39.416799300 +0200 +++ rc-beta2/program/include/rcube_shared.inc 2008-06-06 10:07:39.177963387 +0200 @@ -581,4 +581,33 @@ return $mime_type; } -?> \ Brak znaku nowej linii na koĹ�cu pliku + +/** + * A method to guess encoding of a string. + * + * @param string $string String. + * @param string $failover Default result for failover. + * + * @return string + */ +function rc_detect_encoding($string, $failover='') +{ + if (!function_exists('mb_detect_encoding')) { + return $failover; + } + + // FIXME: the order is important, because sometimes + // iso string is detected as euc-jp and etc. + $enc = array( + 'UTF-8', 'ISO-8859-1', 'ISO-8859-2', 'ISO-8859-3', 'ISO-8859-4', + 'ISO-8859-5', 'ISO-8859-6', 'ISO-8859-7', 'ISO-8859-8', 'ISO-8859-9', + 'ISO-8859-10', 'ISO-8859-13', 'ISO-8859-14', 'ISO-8859-15', 'ISO-8859-16', + 'WINDOWS-1252', 'WINDOWS-1251', 'EUC-JP', 'EUC-TW', 'KOI8-R' + ); + + $result = mb_detect_encoding($string, join(',', $enc)); + + return $result ? $result : $failover; +} + +?> -- Aleksander 'A.L.E.C' Machniak http://alec.pl gg:2275252 LAN Management System Developer http://lms.org.pl Roundcube Webmail Project Developer http://roundcube.net _______________________________________________ List info: http://lists.roundcube.net/dev/

3 3

Enable config files download from installer
by Robin Elfrink 06 Jun '08

06 Jun '08

Hi all, Please test attached patch, which enables downloading of freshly created config files from the installer. Robin --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/35/rDnkUEMQ/config-download.2008.patch Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/dev/

1 2

Fw: not able to read forwarded messages that are attachments
by Jason Levine 06 Jun '08

06 Jun '08

I narrowed the problem down a little further. I successfully was able to read an eml attachment that was sent from google webmail. but when I send from a standalone outlook express client the same attachment is not readable. Thanks, Jason Levine ----- Original Message ----- From: "Jason Levine" <jason(a)wiredhosting.com> To: "till" <klimpong(a)gmail.com> Cc: "RoundCube Dev" <dev(a)lists.roundcube.net> Sent: Thursday, May 08, 2008 7:05 AM Subject: Fw: [RCD] not able to read forwarded messages that are attachments >I don't seem to be making any headwinds into the mysterious eml files are >unreadable error. > Do you have any suggestions on where I might start looking. I keep > thinking it is a MIME error, but I don't see anything wrong. > > > Thanks, > Jason > _______________________________________________ List info: http://lists.roundcube.net/dev/

3 8

Updated Arabic Translation
by Ossama Khayat 05 Jun '08

05 Jun '08

Hi, Attached is the updated Arabic translation of both messages.inc and labels.inc in zip format. regards, Ossama Khayat --- 8< --- detachments --- 8< --- The following attachments have been detached and are available for viewing. http://detached.gigo.com/rc/j4/v8IuP9MD/roundcube-ar.zip Only click these links if you trust the sender, as well as this message. --- 8< --- detachments --- 8< --- _______________________________________________ List info: http://lists.roundcube.net/dev/

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev