Dev

dev@lists.roundcube.net

1 participants
4289 discussions

Error 500 with 0.9.0
by Glen Eustace 17 Apr '13

17 Apr '13

Hi, I am trying to upgrade from 0.8.4 to 0.9 in our dev environment. Most things seem to be fine but I am getting an Error 500 from the web server when trying to access 'Settings'. I cannot find where the error is logged or if it is logged at all. Nothing is written to the httpd error log and all I get in the access log is the result code of 500. Can someone give me a clue as to where to look for the errors. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph: +64 6 357 8168, Fax: +64 6 357 8165, Mob: +64 27 542 4015 "A Ministry specialising in providing low-cost professional Internet Services to NZ Christian Churches, Ministries and Organisations"

2 2

Can't register on http://trac.roundcube.net/register
by Tom Sommer 16 Apr '13

16 Apr '13

Hi, I'm trying to register on trac to submit a bug report, but the registration link appears to be broken? Or am I missing something? :) Thanks -- Tom Sommer

2 3

Release / version number in CHANGELOG
by Jonas Meurer 11 Apr '13

11 Apr '13

Hi Roundcube Developers, I'm really impressed by quality and speed of development of roundcube. Thank you for the great software! I've a minor suggestion: would you mind adding the release/version number of current releases to the CHANGELOG file of release tarballs? Current practice is that sections with changes from former releases are introduced with 'RELEASE <NUMBER>', but changes from current release aren't introduced at all. It would be great if you could add an introduction line for current releases as well. Background is that we try to track new releases of manually installed software on our servers using a nagios check script. This script parses the changelog files with a regular expression and searches the projects download pages for new releases. Kind regards, jonas

4 4

security audit?
by Kelsey Cummings 09 Apr '13

09 Apr '13

I'm curious if a security audit/code review has been performed on RC in the past and, if not, is there any interested by the other commercial users here in sponsoring one? -- Kelsey Cummings - kgc(a)corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

1 0

Develompment Plugin Message Attachment
by tornis＠tornis.com.br 09 Apr '13

09 Apr '13

Hello Developers, I need a functionality message attachment to another message. For example: I'm writing a new post and would like to attach a message in my inbox or any other message that is in my mailbox. If someone interested in developing this plugin please contact tornis(a)tornis.com.br. We are willing to pay for development and provide for the community under GPL licensing. The following minimum requirements: 1 - Allow message attachment to a new message (similar to thunderbird) 2 - Allow View member the attached message in a new window 3 - Allow searching of messages to be attached 4 - Allow append multiple messages to a message Sorry for my English and thank you all. Rodrigo Tornis

2 1

HTML vs Text issues
by Michael Heydekamp 04 Apr '13

04 Apr '13

I'm referring to the multipart7alternative message of Manfred Usselmann in this list, 23.03.2013, 08:51. In the HTML part, the quote levels get incorrect upon replying (quoted and new text have the same quote level then, although they look ok when displaying the message), and there are blank lines in the quoted part of Manfred's message where they weren't in the original before. But the text part is even worse: The format is totally garbled, and even more worse, a lot of text is completely missing. Look at the line ... ------------------------------- > Yes, that's what we currently have. ------------------------------- ...for instance. Why is it formatted/wrapped this way if it is correct in the HTML part? And where is all the text gone? See images attached. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

2 4

Subject empty upon replying?
by Michael Heydekamp 03 Apr '13

03 Apr '13

Hi there, is it deliberate that a reply to a message with the subject header ... -------------------------------------------------- Subject: Re: [TICKET #38797] Ankündigung Kündigung -------------------------------------------------- ... leaves the subject entirely empty?? Of course the subject does contain 8-bit chars and is therefore not encoded correctly (or to be more precise, it's not encoded at all), but is this a good reason to delete it completely upon replying? In the message view pane, the subject is displayed as: --------------------------------------- Re: [TICKET #38797] Ankndigung Kndigung --------------------------------------- The 8-bit chars are deleted there. Wouldn't it be better to replace them with "?"...? And the same could/should be done upon replying, IMO. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

4 17

Charset declaration and display of text attachments
by Michael Heydekamp 02 Apr '13

02 Apr '13

How can I make sure that all of the three attachments to this post will be displayed correctly in Roundcube when clicking on the attachment link? Currently only the UTF-8 version will be displayed correctly. I'm not sure about how to deal with the Unicode version, but at least the plain text version is definitely lacking of a correct charset declaration (or better, of a charset declaration at all). As this charset can't be detected or known by any other than the user who is attaching the text file, I suggest that there should be a facility to select the appropriate charset - sometimes... But apart from that, I'm wondering which charset Roundcube is using at all when displaying the plain text file...? It is apparently not the local 8bit charset of my system (Windows-1252), as it should then being displayed this way: > ÕÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ¸ > ³ DOS Codepage 437 ³ > ÔÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ¾ But see yourself what the output is (image attached as well)... Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

2 4

possible bug in 0.9rc
by Cor Bosman 01 Apr '13

01 Apr '13

Hey all, just wondering if this could be a bug. If so, i'll add it to the tracker, else i'll fix my plugin. I got a report that my listcommands plugin starts throwing errors in 0.9 because in message_headers_output $p['headers']->others[$key] ends up being an array instead of a string. This is weird, because in the example sent to me, I see the following: List-Post: <mailto:users@foo.bar> But when you var_dump the data in the hook you see: "list-post"]=> array(2) { [0]=> string(22) "<mailto:users@foo.bar>" [1]=> string(22) "<mailto:users@foo.bar>" } My guess is that this may be because RC itself now asks for LIST-POST header, and my plugin adds that to the requested header set in imap_init. Now I can remove that, but I think RC shouldnt fetch the same content twice and add a duplicate to the header array. Or is this intended behavior? Regards, Cor

2 1

Security updates 0.8.6 and 0.7.3 for save-pref vulnerability
by Thomas Bruederli 29 Mar '13

29 Mar '13

After getting reports about a possible vulnerability of Roundcube which allows an attacker to modify its users preferences in a way that he/she can then read files from the server, we now published updated packages as well as patches that fix this security issue. Please update all your Roundcube installations with the new versions (0.9-rc2, 0.8.6, 0.7.4) or patch them with the published patches. Download the latest version from http://roundcube.net/download Patch for 0.9.x: http://ow.ly/jtQD0 Patch for 0.8.x: http://ow.ly/jtQHM Patch for 0.7.x: http://ow.ly/jtQK0 Patch for 0.6: http://ow.ly/jtQNd In order to find out whether one of your users has vulnerable preferences, you can run the following query on the Roundcube user database: SELECT * FROM users WHERE preferences LIKE '%generic_message_footer%' If this returns any results, you should at least clear the 'preferences' field of that user entry. Or better: entirely block the user because he or she most likely tried to exploit your system. And here's some background about the vulnerability: http://lists.roundcube.net/pipermail/dev/2013-March/022328.html Best regards, Thomas

5 12

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev