Dev

dev@lists.roundcube.net

4291 discussions

Roundcube Webmail 1.1.0 released
by Thomas Bruederli 09 Feb '15

09 Feb '15

Dear subscribers We’re proud to announce the arrival of the next major version 1.1.0 of Roundcube webmail which is now available for download. With this milestone we introduce new features since version 1.0 as well as some clean-up with the 3rd party libraries: - Allow searching across multiple folders - Improved support for screen readers and assistive technology using WCAG 2.0 andWAI ARIA standards - Update to TinyMCE 4.1 to support images in HTML signatures (copy & paste) - Added namespace filter and folder searching in folder manager - New config option to disable UI elements/actions - Stronger password encryption using OpenSSL - Support for the IMAP SPECIAL-USE extension - Support for Oracle as database backend - Manage 3rd party libs with Composer In addition to that, we added some new features to improve protection against possible but yet unknown CSRF attacks - thanks to the help of Kolab Systems who supplied the concept and development resources for this. Although the new security features are yet experimental and disabled by default, our wiki describes how to enable the Secure URLs [1] and give it a try. And of course, this new version also includes all patches for reported CSRF and XSS vulnerabilities previously released in the 1.0.x series. IMPORTANT: with the 1.1.x series, we drop support for PHP < 5.3.7 and Internet Explorer < 9. IE7/IE8 support can be restored by enabling the ‘legacy_browser’ plugin which is part of the default package. See the complete changelog at http://trac.roundcube.net/wiki/Changelog and download the new packages from http://roundcube.net/download. The download packages come in two flavors: "dependent", which requires the manual installation of 3rd party libs using Composer and "complete", with all the required libraries already packed into the vendor directory and ready to run. Best, Thomas [1] http://trac.roundcube.net/wiki/Howto_Config/Secure_URLs

1 0

Re: [RCD] How to pass cookies or session from roundcube webmail to
by martijn.thie＠kpn.com 09 Feb '15

09 Feb '15

On Fri, Feb 6, 2015 at 11:26 PM, Avinash P <avinashp12015(a)gmail.com> wrote: > > Hi, > > I have to pass session or cookis from roundcube webmail to chat > > application for currently login users > > In order to get a sophisticated answer to your question, you should come up > with a more detailed description of what you're trying to do and what you > have so far. > > In general, session cookies are bound to the hostname but can be extended > to the entire domain using the $config['session_domain'] config option in > Roundcube. If the session cookie reaches the server of your chat application, > you can re-use Roundcube sessions by reading them from the same > database where Roundcube stores its data. But as said, if you expect a more > specific response, we need more details to help you. > > Kind regards, > Thomas In general I would say that you should never re-use sessions, but instead let the client setup separate sessions for each application. Re-using sessions can lead to a lot of problems. Most of the times, if you need information from another application, just use the API. My guess is that you want to re-use the authenticated account rather then you would re-use the session. If you're looking for single-sing-on functionality, you'll probably should build a plugin that hooks into the authentication functionality. There are several examples of those online. Please take a look at these links: http://trac.roundcube.net/wiki/Plugin_Repository http://trac.roundcube.net/browser/github/plugins/http_authentication/http_a… Regards, Martijn

1 0

How to pass cookies or session from roundcube webmail to other application
by Avinash P 07 Feb '15

07 Feb '15

Hi, I have to pass session or cookis from roundcube webmail to chat application for currently login users

2 1

plugins, composer and automatic_addressbook plugin
by Sébastien BLAISOT 01 Feb '15

01 Feb '15

Hi all, I'm proud to inform you that I finally found how to migrate the automatic_addressbook plugin from svn to git. The tricky part was the layout change somewhere back in the project's history as I didn't want to loose some of the commit history. Now as the git repo is clean and has all commit history, I published it on github and imported on roundcube's plugin repository. So I began to play with composer. When adding automatic_addressbook in my composer.json, I get it installed, but it installed me the dev-master branch. I thought that only published versions (tags) were installed unless specifically specified. What is the correct/prefferred way to tell composer to only install "stable" versions of a plugin ? regards, -- Sébastien 圣巴斯弟盎

2 1

Security update 1.0.5 released
by Thomas Bruederli 24 Jan '15

24 Jan '15

Dear Roundcube users We just released a security update to the stable version 1.0 of Roundcube webmail. Beside a recently reported Cross-Site-Scripting vulnerability, it also contains some bug fixes and improvements we found important for the long term support branch of Roundcube. The fixed XSS issue is documented here: http://trac.roundcube.net/ticket/1490227 See the full changelog here: http://trac.roundcube.net/wiki/Changelog It's considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from http://roundcube.net/download. And like always: backup before updating! Kind regards, Thomas

1 0

dino.blazeka@gmail.com is waiting for your reply. Respond?
by dino.blazeka＠gmail.com 27 Dec '14

27 Dec '14

Hi, dino.blazeka(a)gmail.com wants to follow you. ****** Is dino.blazeka(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.fliporamail.com/signup_e.html?fullname=&email=dev@lists.… If No please follow the link below: http://invites.fliporamail.com/signup_e.html?fullname=&email=dev@lists.… Follow the link below to remove yourself from all such emails http://invites.fliporamail.com/uns_inviter.jsp?email=dev@lists.roundcube.ne…

1 0

You have a new notification from dino.blazeka@gmail.com. View?
by dino.blazeka＠gmail.com 24 Dec '14

24 Dec '14

Hi, dino.blazeka(a)gmail.com wants to follow you. ****** Is dino.blazeka(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.infoaxe.net/signup_e.html?fullname=&email=dev@lists.roun… If No please follow the link below: http://invites.infoaxe.net/signup_e.html?fullname=&email=dev@lists.roun… Follow the link below to remove yourself from all such emails http://invites.infoaxe.net/uns_inviter.jsp?email=dev@lists.roundcube.net&am…

1 0

Update 1.0.4 released
by Thomas Bruederli 23 Dec '14

23 Dec '14

Dear Roundcube users We're proud to announce the next service release to the stable version 1.0 of Roundcube webmail. It contains a security fix along with some bug fixes and improvements for the long term support branch of Roundcube. The most important ones are: * Security: Fix possible CSRF attacks to some address book operations as well as to the ACL and Managesieve plugins. * Fix attachments encoded in TNEF containers (from Outlook) * Fix compatibility with PHP 5.2 See the full changelog here: http://trac.roundcube.net/wiki/Changelog It's considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from http://roundcube.net/download. And remember: backup before updating! Kind regards, Thomas

3 4

You have a new notification from dino.blazeka@gmail.com. View??
by dino.blazeka＠gmail.com 21 Dec '14

21 Dec '14

Hi, dino.blazeka(a)gmail.com wants to follow you. ****** Is dino.blazeka(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.info-emailer.com/signup_e.html?fullname=&email=dev@lists… If No please follow the link below: http://invites.info-emailer.com/signup_e.html?fullname=&email=dev@lists… Follow the link below to remove yourself from all such emails http://invites.info-emailer.com/uns_inviter.jsp?email=dev@lists.roundcube.n…

1 0

dino.blazeka@gmail.com has indicated you're a friend. Accept?
by dino.blazeka＠gmail.com 18 Dec '14

18 Dec '14

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev