Thread: SF.net SVN: postfixadmin:[430] trunk/CHANGELOG.TXT
Brought to you by:
christian_boltz,
gingerdog
From: <chr...@us...> - 2008-07-29 23:32:13
|
Revision: 430 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=430&view=rev Author: christian_boltz Date: 2008-07-29 23:32:23 +0000 (Tue, 29 Jul 2008) Log Message: ----------- CHANGELOG.TXT - updated with the latest changes (r415-r429) Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2008-07-29 23:18:40 UTC (rev 429) +++ trunk/CHANGELOG.TXT 2008-07-29 23:32:23 UTC (rev 430) @@ -14,8 +14,14 @@ Only in SVN trunk -------------------- - - added support for domain aliases (from lenix) + - added support for domain aliases (from lenix) (can be disabled with $CONF['alias_domain']) + - add clear error message for non-resolvable domains when creating mailboxes or aliases + - check for non-resolvable domains on domain creation + - enable re-notification after definable timeout in vacation (patch from Luxten) - updated postfix example configuration for domain aliases and to use the new mysql map format + - translation updates + - several small bugfixes + - SVN revision ******************************* Version 2.2.1.1 - 2008/07/23 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2008-11-11 20:48:46
|
Revision: 474 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=474&view=rev Author: christian_boltz Date: 2008-11-11 20:48:42 +0000 (Tue, 11 Nov 2008) Log Message: ----------- CHANGELOG.TXT - doing the paperwork: updated changelog with all commits up to svn r473 (aka "current trunk" - this commit will become r474) Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2008-11-06 22:08:35 UTC (rev 473) +++ trunk/CHANGELOG.TXT 2008-11-11 20:48:42 UTC (rev 474) @@ -15,10 +15,33 @@ -------------------- - added support for domain aliases (from lenix) (can be disabled with $CONF['alias_domain']) - - add clear error message for non-resolvable domains when creating mailboxes or aliases + Important: If you update from a previous version, you'll have to adapt your postfix + configuration (see DOCUMENTS/POSTFIX_CONF.txt) - or just disable alias domain support, + your postfix configuration will continue to work + - updated postfix example configuration for domain aliases and to use the new mysql map format + - vacation.pl: + - add option for re-notification after definable timeout (patch from Luxten) + (default stays on "notify once") + - force usage of envelope from/to, better checks for mailinglists, spam etc. + If in doubt, do not send a vacation reply (patch from Lutxen) + - added a small test suite + - use Log4Perl + - allow to enter the configuration in /etc/mail/postfixadmin/vacation.conf + instead of editing vacation.pl directly + - bump version number of vacation.pl + - added clear error message for non-resolvable domains when creating mailboxes or aliases - check for non-resolvable domains on domain creation - - enable re-notification after definable timeout in vacation (patch from Luxten) - - updated postfix example configuration for domain aliases and to use the new mysql map format + - new option $CONF['create_mailbox_subdirs_prefix'] for compatibility with more IMAP servers + - fix "illegal mix of collations" problem in MySQL by explicitely setting the charset everywhere + - fix: cleanup vacation_notification table when disabling vacation + - fix: config and fetchmail tables now honor $CONF['database_tables'] + - fix: "unlimited" and "disabled" for quota and limits were crossed at several places + - fix: honor $CONF['default_transport'] even if $CONF['transport'] = "no" (patch by fabiobon) + - show links to create mailboxes or alias even on disabled domains + - added support for fetchmail's "ssl" option + - force username to be lowercase - this helps some IMAP clients apprently + - dropped $CONF['show_custom_count']. PHP can count ;-) + - dropped obsolete VIRTUAL_VACATION/mail-filter script - translation updates - several small bugfixes - SVN revision ******************************* This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2008-11-23 12:24:16
|
Revision: 486 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=486&view=rev Author: christian_boltz Date: 2008-11-23 12:24:14 +0000 (Sun, 23 Nov 2008) Log Message: ----------- CHANGELOG.txt - updated with changes up to r485 - moved SVN revisions to version headlines - this increases the chance that we don't forget to include them ;-) Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2008-11-23 12:18:20 UTC (rev 485) +++ trunk/CHANGELOG.TXT 2008-11-23 12:24:14 UTC (rev 486) @@ -39,7 +39,11 @@ - fix: honor $CONF['default_transport'] even if $CONF['transport'] = "no" (patch by fabiobon) - show links to create mailboxes or alias even on disabled domains - added support for fetchmail's "ssl" option + - superadmin can now setup fetchmail for all users, not only for himself - force username to be lowercase - this helps some IMAP clients apprently + - the "probably undeliverable" marker now honors catchall targets + - on mailbox creation, show password if $CONF['generate_password'] == 'YES', but + do not show it if it was _not_ autogenerated and $CONF['show_password'] == 'NO' - dropped $CONF['show_custom_count']. PHP can count ;-) - dropped obsolete VIRTUAL_VACATION/mail-filter script - translation updates @@ -47,15 +51,14 @@ - SVN revision ******************************* -Version 2.2.1.1 - 2008/07/23 ----------------------------- +Version 2.2.1.1 - 2008/07/23 - SVN r412 +--------------------------------------- - fixed version number in functions.inc.php ;-) - - SVN revision 412 -Version 2.2.1 - 2008/07/21 --------------------------- +Version 2.2.1 - 2008/07/21 - SVN r408 +------------------------------------- - added quota parameter to mailbox_postcreation hook - new hook to update the quota after editing a mailbox ($CONF['mailbox_postedit_script']) @@ -65,7 +68,6 @@ - several small bugfixes - Norwegian (bokmal) translation added - several translation updates - - SVN revision 408 Version 2.2.0 - 2008/04/29 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <Gin...@us...> - 2009-01-15 13:02:25
|
Revision: 521 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=521&view=rev Author: GingerDog Date: 2009-01-15 12:24:56 +0000 (Thu, 15 Jan 2009) Log Message: ----------- CHANGELOG.TXT: 2.3beta.. soon perhaps Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2009-01-15 12:24:36 UTC (rev 520) +++ trunk/CHANGELOG.TXT 2009-01-15 12:24:56 UTC (rev 521) @@ -14,6 +14,9 @@ Only in SVN trunk -------------------- +Version 2.3 Beta - 2009/01/15 - SVN r518 +----------------------------------------- + - added support for domain aliases (from lenix) (can be disabled with $CONF['alias_domain']) Important: If you update from a previous version, you'll have to adapt your postfix configuration (see DOCUMENTS/POSTFIX_CONF.txt) - or just disable alias domain support, @@ -40,7 +43,7 @@ - show links to create mailboxes or alias even on disabled domains - added support for fetchmail's "ssl" option - superadmin can now setup fetchmail for all users, not only for himself - - force username to be lowercase - this helps some IMAP clients apprently + - force username to be lowercase - this helps some IMAP clients apparently - the "probably undeliverable" marker now honors catchall targets - on mailbox creation, show password if $CONF['generate_password'] == 'YES', but do not show it if it was _not_ autogenerated and $CONF['show_password'] == 'NO' @@ -48,7 +51,10 @@ - dropped obsolete VIRTUAL_VACATION/mail-filter script - translation updates - several small bugfixes - - SVN revision ******************************* + - Added domain-postcreation script support + - Added dovecot quota support (documentation + viewing in postfixadmin) + - Enhanced mailbox table to make it easier for people to customise where mailboxes live + - Enhanced fetchmail.pl script (file locking, syslog logging, configuration file etc) Version 2.2.1.1 - 2008/07/23 - SVN r412 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2009-01-30 22:40:51
|
Revision: 558 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=558&view=rev Author: christian_boltz Date: 2009-01-30 22:19:50 +0000 (Fri, 30 Jan 2009) Log Message: ----------- CHANGELOG.TXT - updated to r557 Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2009-01-28 21:02:22 UTC (rev 557) +++ trunk/CHANGELOG.TXT 2009-01-30 22:19:50 UTC (rev 558) @@ -12,8 +12,18 @@ Only in SVN trunk --------------------- +----------------- + +Version 2.3 - 2009/01/30 - SVN r557 +----------------------------------- + - vacation.pl: make it strip/discover addresses better, slightly better logging, stop it + requiring a messageid + - added ADDITIONS/delete-mailq-by-domain.pl (by Jose Nilton) + - added ADDITIONS/quota_usage.pl (by Jose Nilton) - produces report of quota usage + - some small bugfixes + + Version 2.3 Beta - 2009/01/15 - SVN r527 ----------------------------------------- @@ -32,14 +42,22 @@ - allow to enter the configuration in /etc/mail/postfixadmin/vacation.conf instead of editing vacation.pl directly - bump version number of vacation.pl + - added domain-postcreation script support + - added dovecot quota support (documentation + viewing in postfixadmin) + - enhanced mailbox table to make it easier for people to customise where mailboxes live + (new column "local_part") + - enhanced fetchmail.pl script (file locking, syslog logging, configuration file etc) - added clear error message for non-resolvable domains when creating mailboxes or aliases - check for non-resolvable domains on domain creation - new option $CONF['create_mailbox_subdirs_prefix'] for compatibility with more IMAP servers + - added support for mysql encrypt() password encrpytion - fix "illegal mix of collations" problem in MySQL by explicitely setting the charset everywhere - fix: cleanup vacation_notification table when disabling vacation - fix: config and fetchmail tables now honor $CONF['database_tables'] + - fix: several table names were hardcoded in database creation/update - fix: "unlimited" and "disabled" for quota and limits were crossed at several places - fix: honor $CONF['default_transport'] even if $CONF['transport'] = "no" (patch by fabiobon) + - fix: transport field is no longer emptied on domain edit if editing transport is disabled - show links to create mailboxes or alias even on disabled domains - added support for fetchmail's "ssl" option - superadmin can now setup fetchmail for all users, not only for himself @@ -51,10 +69,6 @@ - dropped obsolete VIRTUAL_VACATION/mail-filter script - translation updates - several small bugfixes - - Added domain-postcreation script support - - Added dovecot quota support (documentation + viewing in postfixadmin) - - Enhanced mailbox table to make it easier for people to customise where mailboxes live - - Enhanced fetchmail.pl script (file locking, syslog logging, configuration file etc) Version 2.2.1.1 - 2008/07/23 - SVN r412 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <Gin...@us...> - 2009-03-19 19:52:18
|
Revision: 590 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=590&view=rev Author: GingerDog Date: 2009-03-19 19:52:15 +0000 (Thu, 19 Mar 2009) Log Message: ----------- CHANGELOG.TXT: update Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2009-03-18 20:08:44 UTC (rev 589) +++ trunk/CHANGELOG.TXT 2009-03-19 19:52:15 UTC (rev 590) @@ -11,18 +11,20 @@ # $Id$ -Only in SVN trunk ------------------ +Version 2.3rc2 - 2009/02/03 - SVN r589 +-------------------------------------- - -Version 2.3 - 2009/02/03 - SVN r561 ------------------------------------ - - vacation.pl: make it strip/discover addresses better, slightly better logging, stop it - requiring a messageid + - Refactor /users (see /model) and provide XmlRpc interface for remote mail clients + (e.g. squirrelmail-postfixadmin) + - Add dovecotpw support - see: + https://sourceforge.net/tracker/index.php?func=detail&aid=2607332&group_id=191583&atid=937966 + - Add unit tests for model/ directory (see /tests) + - Add additional scripts to ADDITIONS + - Documentation updates + - Various language updates - added ADDITIONS/delete-mailq-by-domain.pl (by Jose Nilton) - added ADDITIONS/quota_usage.pl (by Jose Nilton) - produces report of quota usage - added support for courier authlib authentication flavors ($CONF['authlib_default_flavor']) - - some small bugfixes and language updates Version 2.3 Beta - 2009/01/15 - SVN r527 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2009-10-24 00:17:40
|
Revision: 737 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=737&view=rev Author: christian_boltz Date: 2009-10-24 00:13:39 +0000 (Sat, 24 Oct 2009) Log Message: ----------- CHANGELOG.TXT: - updated with all changes since 2.3 rc7 - fixed SVN revision of 2.3 rc7 Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2009-10-24 00:11:09 UTC (rev 736) +++ trunk/CHANGELOG.TXT 2009-10-24 00:13:39 UTC (rev 737) @@ -10,8 +10,23 @@ # Last update: # $Id$ +Version ***svn*** - 2009/10/24 - SVN r***** +-------------------------------------- -Version 2.3rc7 - 2009/07/27 - SVN r691 + - automatically create quota tables for dovecot (both 1.0/1.1 and >= 1.2) + - list-virtual can now handle both table formats + - fixed upgrade.php for MySQL 6.0 compability + - changed vacation.pl syslog facility from "user" to "mail" + - added config option for postregsql database port + - added config option to enable/disable XMLRPC interface (default: off) + - Fix check/query for alias with enabled vacation in vacation.pl + - Fix db_get_boolean() to return t/f for postgresql, not true/false + - Fix missing quoting for boolean values in SQL queries at various places + - Allow SHA courier-authlib passwords + - various small bug fixes + - fixed SVN revision for 2.3rc7 in changelog (was r691, should be r694) + +Version 2.3rc7 - 2009/07/27 - SVN r694 -------------------------------------- - Fix bug with confd-link.sh debian thing (breakage on Lenny with wwwconfig-common 0.1.2) This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2009-12-28 21:34:23
|
Revision: 793 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=793&view=rev Author: christian_boltz Date: 2009-12-28 21:34:08 +0000 (Mon, 28 Dec 2009) Log Message: ----------- CHANGELOG.TXT: - changelog update - fix release details for 2.3 (broken by smarty merge) Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2009-12-28 21:24:38 UTC (rev 792) +++ trunk/CHANGELOG.TXT 2009-12-28 21:34:08 UTC (rev 793) @@ -10,9 +10,23 @@ # Last update: # $Id$ -Version ***svn*** - 2009/10/24 - SVN r***** --------------------------------------- +Version ***svn*** - 2009/12/26 - SVN r*** +----------------------------------- + + - NOTE: changes from the 2.3 branch also apply to this version + - use smarty for templates + - add ability to choose activation date for vacation message in user module + - merge search functionality into list-virtual.php + +Version ***svn 2.3 branch*** - 2009/12/26 - SVN r*** +----------------------------------- + +*** see 2.3 branch CHANGELOG.TXT, will be added here after 2.3.1 release *** + +Version 2.3 - 2009/10/24 - SVN r739 +----------------------------------- + - automatically create quota tables for dovecot (both 1.0/1.1 and >= 1.2) - list-virtual can now handle both table formats - fixed upgrade.php for MySQL 6.0 compability This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2014-02-20 22:34:55
|
Revision: 1653 http://sourceforge.net/p/postfixadmin/code/1653 Author: christian_boltz Date: 2014-02-20 22:34:51 +0000 (Thu, 20 Feb 2014) Log Message: ----------- CHANGELOG.TXT: - include 2.3.7 changelog - update with major changes since r1617 Revision Links: -------------- http://sourceforge.net/p/postfixadmin/code/1617 Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2014-02-20 22:10:29 UTC (rev 1652) +++ trunk/CHANGELOG.TXT 2014-02-20 22:34:51 UTC (rev 1653) @@ -9,7 +9,7 @@ # Last update: # $Id$ -Version ***svn*** - 2013/12/09 - SVN r*** +Version ***svn*** - 2014/02/__ - SVN r*** ----------------------------------- Summary of major changes: @@ -249,6 +249,7 @@ - upgrade_1284(): migrate the ALL domain to the superadmin column Note: The ALL domain is not (yet) deleted to stay backwards-compatible for now (will be done in a later upgrade function) + - change {BOOLEAN} to include "default false" login.php - when login.php is requested, logout the current admin/user @@ -266,7 +267,6 @@ - setAway(): add (optional) new parameters for interval_time, activeFrom and activeUntil - https://sourceforge.net/p/postfixadmin/patches/113/ - change $_SESSION['username'] to $_SESSION['sessid']['username'] -***** Note: the changes in xmlrpc.php are untested! *.lang: - get rid of several duplicate texts @@ -277,7 +277,12 @@ - SECURITY.TXT: add note about templates_c directory - DOCUMENTS/POSTFIX_CONF.TXT is now executable and can generate the mysql_*.cf maps for postfix + - update DOCUMENTS/DOVECOT.TXT for dovecot 2.x + squirrelmail plugin: + - various bugfixes + - documentation update + Debian packaging: - Changed source format to 3.0 (quilt) - simplified the DB credential patch and removing ucf registrations on package @@ -290,12 +295,16 @@ - postfixadmin.docs: removed redundant changelog file - debian/postfixadmin.postrm: Call wwwconfig scripts only if they are existing -Changes since 2.3.6 release (from 2.3 branch) +Version 2.3.7 - 2014/02/20 - SVN r1651 (postfixadmin-2.3 branch) ---------------------------------------------------------------- + - SECURITY: fix SQL injection in show_gen_status() - lt.lang, da.lang translation update - when enabling/disabling a mailbox, also update the corresponding alias - fix creating superadmin in setup.php with MariaDB (more strict SQL) - - trim() localpart in create-mailbox to avoid mailbox names with leading space + - don't trim() mail address to avoid that aliases starting with a space are + allowed. This fixes http://sourceforge.net/p/postfixadmin/bugs/210/ and + https://sourceforge.net/p/postfixadmin/feature-requests/113/ + - update regex in check_domain() to support new, longer TLDs like .international - mark vacation_notification.notified field as latin1 to avoid overlong index - vacation.pl: encode subject - vacation.pl: disable use of TLS by default due to a bug in Mail::Sender 0.8.22 This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2015-09-06 21:47:36
|
Revision: 1794 http://sourceforge.net/p/postfixadmin/code/1794 Author: christian_boltz Date: 2015-09-06 21:47:34 +0000 (Sun, 06 Sep 2015) Log Message: ----------- Changelog update (up to r1793) Revision Links: -------------- http://sourceforge.net/p/postfixadmin/code/1793 Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2015-07-13 22:48:01 UTC (rev 1793) +++ trunk/CHANGELOG.TXT 2015-09-06 21:47:34 UTC (rev 1794) @@ -9,22 +9,131 @@ # Last update: # $Id$ +Version 3.0 beta3 (2.93) - 2015/09/** - SVN r**** +------------------------------------------------- + + Summary of major changes: + - add list.php and list.tpl for displaying lists + - based on *Handler $struct, which means list view can now be customized with + $CONF[*_struct_hook] functions (columns with display_in_list and non-empty + label will be displayed) + - add CSV export + - replaces list-domain.php, list-admin.php and fetchmail.php (including their + *.tpl files) and the alias and alias domain lists in list-virtual + - improved / more detailed search support by using URL parameters + (list.php?search[field]=value, optionally also ?searchmode[field]=< - + no pretty search form yet, limited to fields the user/admin can access) + - only display search input box if search fields are specified in *handler + (that effectively means no search box for admin, domain and fetchmail listings) + - can also be used for users (non-admins) + - add FetchmailHandler (replaces fetchmail.php and its template), which also + means postfixadmin-cli can configure fetchmail jobs now + - add $CONF['fetchmail_struct_hook'] + - remove unused $CONF['users_domain_controle'] + + PFAHandler: + - new field types: + - enma - associative array (value => displayed value), must be specified in + the "options" column + - html - raw HTML, used for mailbox status markers which include HTML tags + - b64p - passwords stored as base64, used by FetchmailHandler + - vtxt, vnum - "virtual", read-only text/integer + - quot - formatted quota ("5/10", read-only) + - automatically skip quot, vtxt and vnum fields in store() + - add handling of users (non-admins), including permission checks + - add and use $this->label_field and $this->label for nicer messages + - add $this->order_by to allow ordering by any field(s) + - add getMsg() function (needed by list.php) + - add $msg['can_create'] (true by default, false will hide the 'create' button) + - add $is_superadmin to make admin vs. superadmin easier to handle + - add $can_edit and $can_delete (only available in edit/delete mode, set by + init() based on the '_can_edit' and '_can_delete' from database query) + - add $searchfields[] (list of fields to search by default, $search[_]) + - add $this->msg['show_simple_search'] (true if $searchfields is non-empty) + - split off build_select_query() (also used for pagebrowser) from read_from_db() + and add support for $search['_'] (searching in $searchfields[]) + - read_from_db(), getList(): add $searchmode parameter (_before_ $limit and + $offset!) to be able to use query different query modes, not only "=" + - add getPagebrowser() (returns an array of pagebrowser keys) + + AdminHandler: + - switch to using list.php (replaces list-admin.php) + + DomainHandler: + - reduce required permissions to 'admin', restrict write operations to superadmins + - add optical quota indicators for aliases, mailboxes and domain quota + - fix counting of aliases for domains without any mailbox + - use list.php for displaying domain list (replaces list-domain.php) + + MailboxHandler: + - check_quota(): deny creating an unlimited mailbox if domain quota is set + - storemore(): store maildir in the correct variable to fix running + mailbox_postedit script (bug#342) + + AliasHandler: + - read_from_db_postprocess(): disable _can_edit and _can_delete for default + aliases if special_alias_control is off and not superadmin + - add 'status' column, move gen_show_status handling for aliases from + list-virtual into AliasHandler db_read_from_db_potprocess() + - change getList() to work with empty $condition + - add getPagebrowser() to filter out mailboxes + + edit.php: + - Newer PHP versions (noticed with 5.6.6) don't include empty fields in + $_POST, which broke changing a field to empty. Make sure all !isset() + fields are set to ''. + - for not-set bool values, set $values instead of the (wrong) $inp_values + - add user (non-admin) mode + + delete.php: + - allow users (non-admins) to use delete.php (not used in PostfixAdmin yet) + + list-virtual: + - use AliasHandler, AliasdomainHandler and list.tpl for aliases and alias + domains (the mailbox list still uses the old code) + - replace $alias_pagebrowser_query and the create_page_browser() call + with $handler->getPagebrowser() + - adjust search to use ?search[_]=... + - drop $check_alias_owner variable and check_alias_owner() call + (replaced by the code added in AliasHandler) + + misc: + - translation updates: cs (patch#126), pl (by marcin-github), sv (patch#128) + - add CliScheme.php to display the database scheme (for usage in upgrade.php) + - error_log() a warning if nameserver queries in check_domain() take more than 2 + seconds in total + - add functions db_quota_text() and db_quota_percent() to generate SQL queries + for used quota ("x/y" and percentage) + - pacol(): replace $not_in_db with $multiopt - the remaining parameters can be + specified as associative array (backwards-compatible). Also add $linkto parameter + - db_where_clause(): add $additional_raw_where and $searchmode parameters, + split query into WHERE and HAVING + - delete no longer used check_alias_owner() function + - display "view log" menu entry only if logging is enabled (patch#127) + - smarty.inc.php assign(): additionally provide the unsanitized values as RAW_$key + - setup.php: after creating a superadmin, display a note that the setup is done + and it's possible to login now + - setup.php: stop relying on subversion keyword for database upgrades + - explictly set session_cache_limiter to nocache (bug#347) + - fetchmail.pl: honor the (newly added) active column + - several small changes and fixes at various places - too many to list them here + Version 3.0 beta2 (2.92) - 2014/10/28 - SVN r1706 ------------------------------------------------- -- AliasHandler: don't clean goto field when making alias inactive (bug#316) -- list-virtual: display quota even if $CONF[used_quotas] == NO (bug#307) -- vacation.pl: fix postgresql queries in vacation.pl (bug#315) -- fix query in AliasHandler getList() which caused an empty list and breaks - deletion of aliases in MariaDB (bug#313, bug#325) -- fetchmail.pl: fix ssl extra options (cert check, cert path, fingerprint) -- fix logging (run setup.php to fix old log entries) (bug#317) -- fetchmail.php: change error_reporting() to exclude E_NOTICE (bug#322) -- translation updates: fr (patch#123), nl (patch#122) -- $CONF[default_aliases] can now use the new domain as alias target (patch#124) -- check that vacation start/end date are not in the past (patch#122) -- update vacation INSTALL.TXT with more secure locations -- update Smarty to 3.1.21 + - AliasHandler: don't clean goto field when making alias inactive (bug#316) + - list-virtual: display quota even if $CONF[used_quotas] == NO (bug#307) + - vacation.pl: fix postgresql queries in vacation.pl (bug#315) + - fix query in AliasHandler getList() which caused an empty list and breaks + deletion of aliases in MariaDB (bug#313, bug#325) + - fetchmail.pl: fix ssl extra options (cert check, cert path, fingerprint) + - fix logging (run setup.php to fix old log entries) (bug#317) + - fetchmail.php: change error_reporting() to exclude E_NOTICE (bug#322) + - translation updates: fr (patch#123), nl (patch#122) + - $CONF[default_aliases] can now use the new domain as alias target (patch#124) + - check that vacation start/end date are not in the past (patch#122) + - update vacation INSTALL.TXT with more secure locations + - update Smarty to 3.1.21 Version 3.0 beta1 (2.91) - 2014/05/06 - SVN r1670 ------------------------------------------------- This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2017-02-08 20:46:12
|
Revision: 1895 http://sourceforge.net/p/postfixadmin/code/1895 Author: christian_boltz Date: 2017-02-08 20:46:10 +0000 (Wed, 08 Feb 2017) Log Message: ----------- 3.0.2 again - this time with correct SVN revision Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2017-02-08 20:45:26 UTC (rev 1894) +++ trunk/CHANGELOG.TXT 2017-02-08 20:46:10 UTC (rev 1895) @@ -9,7 +9,7 @@ # Last update: # $Id$ -Version 3.0.2 - 2017/02/08 - SVN r1893 +Version 3.0.2 - 2017/02/08 - SVN r1895 ------------------------------------------------- - SECURITY: don't allow to delete protected aliases (CVE-2017-5930, PR#23) This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2011-03-13 22:22:19
|
Revision: 1000 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=1000&view=rev Author: christian_boltz Date: 2011-03-13 22:22:13 +0000 (Sun, 13 Mar 2011) Log Message: ----------- CHANGELOG.TXT: - merge in changes from 2.3.3 (2.3 branch) - small whitespace fix Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2011-03-13 20:36:24 UTC (rev 999) +++ trunk/CHANGELOG.TXT 2011-03-13 22:22:13 UTC (rev 1000) @@ -18,6 +18,29 @@ - add ability to choose activation date for vacation message in user module - merge search functionality into list-virtual.php +Version 2.3.3 - 2011/03/13 - SVN r999 (postfixadmin-2.3 branch) +--------------------------------------------------------------- + + - create-alias: allow multiple alias targets + - create-alias, edit-alias: prevent input data loss on validation errors + - list-virtual: fix displaying of 'modified' column for aliases when using + postgres + - replaced deprecated split() with preg_split() or explode() + - functions.inc.php: better error messages when database functions are missing + - create domain: fixed typo in variable name that broke the default value for + default aliases + - postgres: changed mailbox.quota, domain.quota and domain.maxquota fields + to bigint to allow mailboxes >4 GB (run setup.php to upgrade your database) + - vacation.pl logged literal $variable instead of the variable content at two + places + - edit-vacation: log enabling/disabling vacation if done by admins + - POSTFIX_CONF.txt: fixed filename for quota map + - config.inc.php: removed double $CONF['database_prefix'] + - config.inc.php: fixed comments about domain_post* script parameters + - updated INSTALL.TXT and UPGRADE.TXT + - sk translation update + - some more minor fixes + Version 2.3.2 - 2010/08/24 - SVN r860 (postfixadmin-2.3 branch) --------------------------------------------------------------- @@ -41,8 +64,8 @@ was a longstanding issue/"missing feature". The ADDITIONS directory contains some new scripts. - SECURITY: users could bypass checking the old password when changing the - password by entering a too short new password. Fortunately only - "exploitable" by authentificated users. + password by entering a too short new password. Fortunately only + "exploitable" by authentificated users. - merge in changes to /debain (thanks normes) from trunk - display alias targets for mailboxes (if $CONF['special_alias_control'] = YES) - add hook for custom maildir path generation This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2011-03-15 19:19:35
|
Revision: 1013 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=1013&view=rev Author: christian_boltz Date: 2011-03-15 19:19:29 +0000 (Tue, 15 Mar 2011) Log Message: ----------- CHANGELOG.TXT: - merge in correct revision and date for 2.3.3 release Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2011-03-14 23:01:20 UTC (rev 1012) +++ trunk/CHANGELOG.TXT 2011-03-15 19:19:29 UTC (rev 1013) @@ -18,8 +18,8 @@ - add ability to choose activation date for vacation message in user module - merge search functionality into list-virtual.php -Version 2.3.3 - 2011/03/13 - SVN r999 (postfixadmin-2.3 branch) ---------------------------------------------------------------- +Version 2.3.3 - 2011/03/14 - SVN r1010 (postfixadmin-2.3 branch) +---------------------------------------------------------------- - create-alias: allow multiple alias targets - create-alias, edit-alias: prevent input data loss on validation errors This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2011-08-05 23:05:31
|
Revision: 1166 http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=1166&view=rev Author: christian_boltz Date: 2011-08-05 23:05:25 +0000 (Fri, 05 Aug 2011) Log Message: ----------- Paperwork ;-) Changelog update with all changes between 2.3.x and trunk. Also includes several TODO notes. Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2011-08-05 22:50:09 UTC (rev 1165) +++ trunk/CHANGELOG.TXT 2011-08-05 23:05:25 UTC (rev 1166) @@ -13,10 +13,55 @@ Version ***svn*** - 2009/12/26 - SVN r*** ----------------------------------- +*** TODO: changelog for r1157 and r1163 +*** TODO: copy changelog from the 2.3 branch after 2.3.3 release to trunk + - NOTE: changes from the 2.3 branch also apply to this version - use smarty for templates - - add ability to choose activation date for vacation message in user module - - merge search functionality into list-virtual.php + - new command-line interface for PostfixAdmin (scripts/postfixadmin-cli) + (still incomplete) + - add ability to choose activation and end date for vacation message + - add support for total quota per domain - $CONF[domain_quota] + - redesign login page, list and edit pages (goodbye, green!) and made them wider + - new config option $CONF['theme_custom_css'] - allows to add some custom CSS + without editing the default CSS file. + - changed default of $CONF['admin_email'] to '' (not set). + IMPORTANT: If set, this will be used as mail sender for all mails + (2.3.x used the currently logged in admin's username in most cases). + $CONF['admin_email'] = '' will match the 2.3.x behaviour. + - replaced motd*.txt with $CONF['motd_*'] + - DOCUMENTS/POSTFIX_CONF.TXT is now executable and can generate the + mysql_*.cf maps for postfix + - list-virtual can now display only mailboxes, only aliases or only alias + domains - or all in one page as in 2.3 + - extreme speedup of page browser in list-virtual if a large number of + mailboxes or aliases exist +*** TODO: totally broken for PostgreSQL :-( - see create_page_browser() in functions.inc.php *** + - display alias domains less confusing (using From/To) +*** TODO: make "all" the default? *** + - merge search.php functionality into list-virtual.php (which brings various + bug fixes for free) + - don't mark mailboxes with vacation active as undeliverable +*** TODO: backport candidate? r1068 *** + - fix: undeliverable targets were not flagged if another target pointed to a + domain in $CONF[show_undeliverable_exceptions] +*** TODO: backport candidate? r1069 *** + - move lots of code into classes (model/*) which is then used by the + webinterface and the commandline interface (still incomplete) + - supress warnings about PHP's date.timezone not set at various places +*** TODO: do it always for Smarty? *** + - table_by_key function now always prepends $CONF['database_prefix'] even if + $CONF['database_tables'][$table] is not set. If you have/had an incomplete + database_tables array and use a database_prefix, you might need to rename/ + add the database_prefix to the affected tables manually. +*** TODO: add a check/warning in setup.php? *** + - cleanup of $PALANG - marked lots of duplicated texts as obsolete + (which means less texts to translate) + - removed <span> and <br> tags from $PALANG texts (formatting is now done in + the templates) + - several translation updates + - merged templates for "edit" and "create" forms and for user and admin mode + - lots of code cleanup, removal of duplicated code etc. Version 2.3.3 - 2011/03/14 - SVN r1010 (postfixadmin-2.3 branch) ---------------------------------------------------------------- This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2013-12-09 23:24:36
|
Revision: 1607 http://sourceforge.net/p/postfixadmin/code/1607 Author: christian_boltz Date: 2013-12-09 23:24:34 +0000 (Mon, 09 Dec 2013) Log Message: ----------- CHANGELOG.TXT: - big update with all changes since 2.3.x (about 300 lines!) - starts with a TL;DR summary ;-) - still includes some details that need to be checked or finetuned (search for "***") Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2013-12-09 22:10:55 UTC (rev 1606) +++ trunk/CHANGELOG.TXT 2013-12-09 23:24:34 UTC (rev 1607) @@ -10,51 +10,322 @@ # $Id$ # (last real update was in r1166 - the above Id: was a minor change) -Version ***svn*** - 2009/12/26 - SVN r*** +Version ***svn*** - 2013/12/09 - SVN r*** ----------------------------------- - - NOTE: changes from the 2.3 branch also apply to this version - - use smarty for templates - - new command-line interface for PostfixAdmin (scripts/postfixadmin-cli) - - add ability to choose activation date, end date and reply interval for vacation message -*** reply interval needs rework, https://sourceforge.net/tracker/?func=detail&aid=3508083&group_id=191583&atid=937966 - - add support for total quota per domain - $CONF[domain_quota] - - redesign login page, list and edit pages (goodbye, green!) and made them wider - - new config option $CONF['theme_custom_css'] - allows to add some custom CSS - without editing the default CSS file. - - changed default of $CONF['admin_email'] to '' (not set). + Summary of major changes: + - new command-line interface "postfixadmin-cli" + - major rewrite: + - move lots of code into *Handler classes, which are used by web and + command-line interface + - replace various edit-*.php and create-*.php with a generic editform + (edit.php/editform.tpl) + - this also means it's easy to customize forms, add fields etc. + (see $CONF['*_struct_hook']) + - lots of code cleanup, remove/merge lots of duplicated code and templates + - use smarty for templates + - various enhancements everywhere + - redesign login page, list and edit pages (goodbye, green!) and make them wider + - several new config options and changed defaults + - NOTE: changes from the 2.3.x releases also apply to this version + + new config options: + - $CONF['language_hook'] + Hook function to override or add translations to $PALANG. + Example hook function included (commented out). + - $CONF['password_validation'] - array with regular expressions to check + if a password is valid/good enough. + The default configuration enforces: + - minimum length 5 characters/digits/whatever + - at least 2 characters + - at least 2 digits + - $CONF['*_struct_hook'] - make $struct in the *Handler classes customizeable + - $CONF['vacation_replytype_control'] - allow selecting vacation reply interval +******* and various other options related to this feature *********** + - $CONF[domain_quota] - total quota per domain + - $CONF['theme_custom_css'] - to add some custom CSS without editing the + default CSS file + - $CONF['motd_*'] - replaces motd*.txt + + changed config defaults (with their new default value): + - $CONF['database_type'] = 'mysqli'; + - $CONF['dovecotpw'] = "/usr/sbin/doveadm pw"; + $CONF['new_quota_table'] = 'YES'; (for dovecot 2) + - $CONF['domain_path'] = 'YES'; $CONF['domain_in_mailbox'] = 'NO'; + (results in domain.tld/username/ maildirs) + - $CONF['alias_control'] = 'YES'; $CONF['alias_control_admin'] = 'YES'; + - $CONF['backup'] = 'NO'; + - $CONF['show_status']='YES'; $CONF['show_status_key']='YES'; + $CONF['show_undeliverable']='YES'; $CONF['show_popimap']='YES'; + $CONF['show_undeliverable_exceptions'] - "gmail.com" removed + - $CONF[*_post*_script] - add empty defaults + - $CONF['admin_email'] = '' IMPORTANT: If set, this will be used as mail sender for all mails (2.3.x used the currently logged in admin's username in most cases). $CONF['admin_email'] = '' will match the 2.3.x behaviour. - - replaced motd*.txt with $CONF['motd_*'] - - DOCUMENTS/POSTFIX_CONF.TXT is now executable and can generate the - mysql_*.cf maps for postfix + + removed config options: + - $CONF['min_password_length'] - now handled in /.{5}/ in + $CONF['password_validation'] + - $CONF[postfix_admin_url] - relative paths are now used everywhere + + list-virtual.php: + - display percentage of quota usage + - display alias domains less confusing (using From/To) - list-virtual can now display only mailboxes, only aliases or only alias domains - or all in one page as in 2.3 - - extreme speedup of page browser in list-virtual if a large number of + - extreme speedup of page browser in list-virtual if a large number of mailboxes or aliases exist - - display alias domains less confusing (using From/To) -*** TODO: make "all" the default? *** - - merge search.php functionality into list-virtual.php (which brings various - bug fixes for free) - - don't mark mailboxes with vacation active as undeliverable + - include search support (replaces search.php and brings various bug fixes + for free) + - fix: delivery to mailbox with a recipient delimiter (mailbox+foo@domain) + was marked as "forward only" + - fix: don't mark mailboxes with vacation active as undeliverable - fix: undeliverable targets were not flagged if another target pointed to a domain in $CONF[show_undeliverable_exceptions] - - move lots of code into classes (model/*Handler) which is then used by the - webinterface and the commandline interface - - supress warnings about PHP's date.timezone not set at various places - - table_by_key function now always prepends $CONF['database_prefix'] even if - $CONF['database_tables'][$table] is not set. If you have/had an incomplete - database_tables array and use a database_prefix, you might need to rename/ - add the database_prefix to the affected tables manually. -*** TODO: add a check/warning in setup.php? *** - - cleanup of $PALANG - removed lots of duplicated texts - (which means less texts to translate) + + fetchmail.php, fetchmail.pl: + - add sslcertck, sslcertpath, sslfingerprint fields/check + (sslcertpath and sslfingerprint require $CONF[fetchmail_extra_options] + because they don't have input validation) + + functions.inc.php + - allowed_quota: if $CONF[quota] == NO, just return 0 (unlimited) + - authentification_get_username() - honor POSTFIXADMIN_SETUP to avoid + a redirect to login.php after creating an admin with setup.php and to + get "SETUP.PHP" for db_log() + - check_domain(), check_email(): instead of calling flash_error(), + return string with error message - or empty string if everything is ok + - check_email(): + - replace $CONF[vacation_domain] only at the end of the mail address + - don't trim() mail address to avoid that aliases starting with a space are + allowed. This fixes http://sourceforge.net/p/postfixadmin/bugs/210/ + - check_language(): remove things like ";q=0.8" before checking if + a language exists + - check_owner(): + - escape_string() $username and $domain to prevent SQL injections + - db_pgsql() - new function to replace lots of + "if ($CONF[database_type] == 'pgsql')) checks + - db_delete(): allow to specify additional conditions for the WHERE clause + - db_get_boolean(): allow 0 and 1 as parameters, not only boolean true/false + - db_log(): + - allow log actions create_admin and edit_admin + - add edit_admin_state and delete_admin as comment/reminder that they + should also be logged + - db_query(): error_log() failed query + - db_where_clause($condition, $struct) - new function to create a WHERE clause + (bool values are converted with db_get_boolean() based on $struct) + - _flash_string(): + - also accept an array of messages, not only a string + - html-escape messages to fix XSS if the message contains user-supplied input + - generate_password(): make generated password always 8 chars long + (instead of $CONF['min_password_length']) + - get_domain_properties(): use DomainHandler (function result mostly + unchanged, only difference: instead of quota_sum in bytes it now + returns total_quota in MB) + - list_domains_for_admin(): + - rewrite to work for superadmins also (will list all domains now + instead of "ALL"), which means we can drop the admin vs. superadmin + check at various places + - pacrypt(): + - no longer escape_string() the result. This fixes + http://sourceforge.net/p/postfixadmin/bugs/218/ + - for 'system' encryption, use full hashed password as salt + https://sourceforge.net/p/postfixadmin/bugs/2/ + - dovecot:*: + - add support for dovecot *-CRYPT passwords (needs dovecot >= 2.1) + - allow "." in dovecot method (to allow a suffix like ".b64") + - Also, the {METHOD} part is no longer removed (passwords without + {METHOD} still work) + - remove_from_array() - new function + - safesession() - new function (like safeget(), but for $_SESSION) + - smtp_mail(): error_log() the error message if fsockopen() fails + - table_by_key() now always prepends $CONF['database_prefix'] + NOTE: If you have/had an incomplete database_tables array and use + $CONF['database_prefix'], you might need to rename the affected tables + manually (add the database_prefix in their name). + - moved several functions to the *Handler classes + - deleted no longer used functions: + - admin_exist() + - authentication_is_admin() + - authentication_is_user() + - boolconf() (moved to Config::bool()) + - check_string() + - create_admin() + - check_alias() (moved to AliasHandler->create_allowed()) + - db_boolean_to_int() + - domain_exist() + - get_admin_properties() + - get_mailbox_properties() + - get rid of global $table_* variables, use table_by_key() instead + + PFAHandler.php: + - parent class for all *Handler classes + - contains code shared between all classes + + AdminHandler.php: + - Handler class for admins + - for now, set the superadmin column and add "ALL" in domain_admins to + keep the database backwards-compatible with 2.3.x + + AdminpasswordHandler.php: + - used for the "change password" form for admins + + DomainHandler.php + - handler class for domains + - delete(): do not allow to delete a domain if it is an alias domain target + + AliasdomainHandler.php: + - handler class for alias domains + - alias domains can now be edited + + AliasHandler.php: + - rewrite based on PFAHandler + - we even get a "deliver to local mailbox" checkbox :-) + - only allow @domain as target if $this->id is a catchall + - remove deprecated functions: + - get() + - hasStoreAndForward() + - update() + - is_mailbox_alias() + - is_vacation_address() + - hasAliasRecord() + + MailboxHandler (previously named UserHandler in 2.3): + - rewrite based on PFAHandler + - drop old __construct(), view() and change_pass() + - replace check of old password in change_pw() with $this->login + - delete(): also cleanup fetchmail, quota and quota2 tables + - always check password with validate_password() + - always display correct available quota (using allowed_quota()) + - do not escape the password coming from $_POST. Fixes + http://sourceforge.net/p/postfixadmin/bugs/218/ + + VacationHandler: + - rewrite based on PFAHandler (not useable yet) + + ------------------------------------------------------------------------ + + vacation: + + - add ability to choose activation date, end date and reply interval for + vacation message +*** reply interval needs rework, +*** http://sourceforge.net/p/postfixadmin/patches/111/ + + vacation.pl + - encode subject + https://sourceforge.net/p/postfixadmin/bugs/272/ + https://sourceforge.net/p/postfixadmin/patches/119/ + + + + + r1373 | GingerDog | 2012-04-19 23:55:36 +0200 (Do, 19. Apr 2012) | 1 Zeile + M /trunk/VIRTUAL_VACATION/vacation.pl + M /trunk/config.inc.php + M /trunk/model/VacationHandler.php + M /trunk/templates/vacation.tpl + M /trunk/upgrade.php + M /trunk/vacation.php + + Merge jan-kruis's vacation interval reply behaviour - see + http://sourceforge.net/p/postfixadmin/patches/111/ + + M /trunk/VIRTUAL_VACATION/vacation.pl + + add a friendly from address to vacation messages ("Vacation Service"); + probably needs more work to beautify it though...; + + change error handling if we cannot + send the reply to be hopefully more robust + + - add $smtp_client config option to specify the helo name + - added custom noreply detection + + ------------------------------------------------------------------------ + + Config.php + - new class to store $CONF + - also used to store $PALANG texts (Config::Lang()) + - contains functions to read config entries in various ways (bool etc.) + + edit.php + - generic edit page for everything (admins, domains, mailboxes, aliases, ...) + - use ?table= parameter to decide what will be edited (basically $tableHandler) + - read handler-specific configuration from $handler->webformConfig() + and use it at various places + - always redirect to edit.php?table=$table after adding an item to + ensure correct initialization for next item + - call $handler->mergeId if $id_field is editable, but not displayed + in form (usecase: merge localpart + domain to address) + - set $form_fields and $id_field later (after $hander->init()) - needed + for AliasHandler to decide if goto_mailbox should be displayed + - only set $values if a field is editable and displayed in the form + + editform.tpl: + - generic edit form template, uses $struct to render the form + - implement handling of 'list' fields (<select> with multiple choices + allowed) + - also include alternative implementation with checkboxes (commented out) + + upgrade.php + - _pgsql_field_exists(), _mysql_field_exists(): + Those functions are always called with the expanded table name - don't + expand it twice. (The better solution would be to change all calling + code to provide non-expanded tablenames, but that's more work.) + - change {BIGINT} to include "NOT NULL DEFAULT 0" + - upgrade_1283(): add a "superadmin" column to the admin table + This is the first step to get rid of the "ALL" dummy domain. + - upgrade_1284(): migrate the ALL domain to the superadmin column + Note: The ALL domain is not (yet) deleted to stay backwards-compatible + for now (will be done in a later upgrade function) + + setup.php: +****** TODO: fix the TODO ;-) + - add TODO note to check for PHP >= 5.2.3 because smarty uses + htmlentities with 4 parameters (4th param added in PHP 5.2.3) + + login.php + - when login.php is requested, logout the current admin/user + https://sourceforge.net/p/postfixadmin/bugs/284/ + - this also means login.php is now used for logout + - error_log() failed login attemps + https://sourceforge.net/p/postfixadmin/feature-requests/111/ + + delete.php, editactive.php: + - require token for CSRF protection, see + https://sourceforge.net/p/postfixadmin/bugs/269/ + + xmlrpc.php: + - adopt to *Handler syntax + - setAway(): add (optional) new parameters for interval_time, activeFrom and + activeUntil - https://sourceforge.net/p/postfixadmin/patches/113/ + - change $_SESSION['username'] to $_SESSION['sessid']['username'] +***** Note: the changes in xmlrpc.php are untested! + + *.lang: + - get rid of several duplicate texts - removed HTML tags from $PALANG texts - several translation updates - - merged templates for "edit" and "create" forms and for user and admin mode - - lots of code cleanup, removal of duplicated code etc. + + documentation updates: + - SECURITY.TXT: add note about templates_c directory + - DOCUMENTS/POSTFIX_CONF.TXT is now executable and can generate the + mysql_*.cf maps for postfix + + Debian packaging: + - Changed source format to 3.0 (quilt) + - simplified the DB credential patch and removing ucf registrations on package + purge... + - control: added php5-cli dependency + - rules: + - some permission fixes to postfixadmin-cli scripts + - New target prep: Create a needed tar.gz file to build a non-nativ .dpkg + - New target build-package: Call this target to build a shiny new .dpkg file + - postfixadmin.docs: removed redundant changelog file + - debian/postfixadmin.postrm: Call wwwconfig scripts only if they are existing Version 2.3.6 - 2013/01/02 - SVN r1417 (postfixadmin-2.3 branch) ---------------------------------------------------------------- This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2013-12-09 23:42:08
|
Revision: 1608 http://sourceforge.net/p/postfixadmin/code/1608 Author: christian_boltz Date: 2013-12-09 23:42:05 +0000 (Mon, 09 Dec 2013) Log Message: ----------- CHANGELOG.TXT: - whitespace fixes Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2013-12-09 23:24:34 UTC (rev 1607) +++ trunk/CHANGELOG.TXT 2013-12-09 23:42:05 UTC (rev 1608) @@ -1,11 +1,11 @@ -# Postfix Admin -# -# LICENSE -# This source file is subject to the GPL license that is bundled with -# this package in the file LICENSE.TXT. -# -# Further details on the project are available at http://postfixadmin.sf.net +# Postfix Admin # +# LICENSE +# This source file is subject to the GPL license that is bundled with +# this package in the file LICENSE.TXT. +# +# Further details on the project are available at http://postfixadmin.sf.net +# # Last update: # $Id$ @@ -13,7 +13,6 @@ Version ***svn*** - 2013/12/09 - SVN r*** ----------------------------------- - Summary of major changes: - new command-line interface "postfixadmin-cli" - major rewrite: @@ -29,7 +28,7 @@ - redesign login page, list and edit pages (goodbye, green!) and make them wider - several new config options and changed defaults - NOTE: changes from the 2.3.x releases also apply to this version - + new config options: - $CONF['language_hook'] Hook function to override or add translations to $PALANG. @@ -47,7 +46,7 @@ - $CONF['theme_custom_css'] - to add some custom CSS without editing the default CSS file - $CONF['motd_*'] - replaces motd*.txt - + changed config defaults (with their new default value): - $CONF['database_type'] = 'mysqli'; - $CONF['dovecotpw'] = "/usr/sbin/doveadm pw"; @@ -64,12 +63,12 @@ IMPORTANT: If set, this will be used as mail sender for all mails (2.3.x used the currently logged in admin's username in most cases). $CONF['admin_email'] = '' will match the 2.3.x behaviour. - + removed config options: - $CONF['min_password_length'] - now handled in /.{5}/ in $CONF['password_validation'] - $CONF[postfix_admin_url] - relative paths are now used everywhere - + list-virtual.php: - display percentage of quota usage - display alias domains less confusing (using From/To) @@ -84,12 +83,12 @@ - fix: don't mark mailboxes with vacation active as undeliverable - fix: undeliverable targets were not flagged if another target pointed to a domain in $CONF[show_undeliverable_exceptions] - + fetchmail.php, fetchmail.pl: - add sslcertck, sslcertpath, sslfingerprint fields/check (sslcertpath and sslfingerprint require $CONF[fetchmail_extra_options] because they don't have input validation) - + functions.inc.php - allowed_quota: if $CONF[quota] == NO, just return 0 (unlimited) - authentification_get_username() - honor POSTFIXADMIN_SETUP to avoid @@ -132,7 +131,7 @@ - no longer escape_string() the result. This fixes http://sourceforge.net/p/postfixadmin/bugs/218/ - for 'system' encryption, use full hashed password as salt - https://sourceforge.net/p/postfixadmin/bugs/2/ + https://sourceforge.net/p/postfixadmin/bugs/2/ - dovecot:*: - add support for dovecot *-CRYPT passwords (needs dovecot >= 2.1) - allow "." in dovecot method (to allow a suffix like ".b64") @@ -159,27 +158,27 @@ - get_admin_properties() - get_mailbox_properties() - get rid of global $table_* variables, use table_by_key() instead - + PFAHandler.php: - parent class for all *Handler classes - contains code shared between all classes - + AdminHandler.php: - Handler class for admins - for now, set the superadmin column and add "ALL" in domain_admins to keep the database backwards-compatible with 2.3.x - + AdminpasswordHandler.php: - used for the "change password" form for admins - + DomainHandler.php - handler class for domains - delete(): do not allow to delete a domain if it is an alias domain target - + AliasdomainHandler.php: - handler class for alias domains - alias domains can now be edited - + AliasHandler.php: - rewrite based on PFAHandler - we even get a "deliver to local mailbox" checkbox :-) @@ -191,7 +190,7 @@ - is_mailbox_alias() - is_vacation_address() - hasAliasRecord() - + MailboxHandler (previously named UserHandler in 2.3): - rewrite based on PFAHandler - drop old __construct(), view() and change_pass() @@ -201,27 +200,27 @@ - always display correct available quota (using allowed_quota()) - do not escape the password coming from $_POST. Fixes http://sourceforge.net/p/postfixadmin/bugs/218/ - + VacationHandler: - rewrite based on PFAHandler (not useable yet) - + ------------------------------------------------------------------------ - + vacation: - + - add ability to choose activation date, end date and reply interval for vacation message *** reply interval needs rework, *** http://sourceforge.net/p/postfixadmin/patches/111/ - + vacation.pl - encode subject https://sourceforge.net/p/postfixadmin/bugs/272/ https://sourceforge.net/p/postfixadmin/patches/119/ - - - - + + + + r1373 | GingerDog | 2012-04-19 23:55:36 +0200 (Do, 19. Apr 2012) | 1 Zeile M /trunk/VIRTUAL_VACATION/vacation.pl M /trunk/config.inc.php @@ -229,28 +228,28 @@ M /trunk/templates/vacation.tpl M /trunk/upgrade.php M /trunk/vacation.php - + Merge jan-kruis's vacation interval reply behaviour - see http://sourceforge.net/p/postfixadmin/patches/111/ - + M /trunk/VIRTUAL_VACATION/vacation.pl - - add a friendly from address to vacation messages ("Vacation Service"); + + add a friendly from address to vacation messages ("Vacation Service"); probably needs more work to beautify it though...; - + change error handling if we cannot send the reply to be hopefully more robust - + - add $smtp_client config option to specify the helo name - added custom noreply detection - + ------------------------------------------------------------------------ - + Config.php - new class to store $CONF - also used to store $PALANG texts (Config::Lang()) - contains functions to read config entries in various ways (bool etc.) - + edit.php - generic edit page for everything (admins, domains, mailboxes, aliases, ...) - use ?table= parameter to decide what will be edited (basically $tableHandler) @@ -263,13 +262,13 @@ - set $form_fields and $id_field later (after $hander->init()) - needed for AliasHandler to decide if goto_mailbox should be displayed - only set $values if a field is editable and displayed in the form - + editform.tpl: - generic edit form template, uses $struct to render the form - implement handling of 'list' fields (<select> with multiple choices allowed) - also include alternative implementation with checkboxes (commented out) - + upgrade.php - _pgsql_field_exists(), _mysql_field_exists(): Those functions are always called with the expanded table name - don't @@ -281,40 +280,40 @@ - upgrade_1284(): migrate the ALL domain to the superadmin column Note: The ALL domain is not (yet) deleted to stay backwards-compatible for now (will be done in a later upgrade function) - + setup.php: ****** TODO: fix the TODO ;-) - add TODO note to check for PHP >= 5.2.3 because smarty uses htmlentities with 4 parameters (4th param added in PHP 5.2.3) - + login.php - when login.php is requested, logout the current admin/user https://sourceforge.net/p/postfixadmin/bugs/284/ - this also means login.php is now used for logout - error_log() failed login attemps https://sourceforge.net/p/postfixadmin/feature-requests/111/ - + delete.php, editactive.php: - require token for CSRF protection, see https://sourceforge.net/p/postfixadmin/bugs/269/ - + xmlrpc.php: - adopt to *Handler syntax - setAway(): add (optional) new parameters for interval_time, activeFrom and activeUntil - https://sourceforge.net/p/postfixadmin/patches/113/ - change $_SESSION['username'] to $_SESSION['sessid']['username'] ***** Note: the changes in xmlrpc.php are untested! - + *.lang: - get rid of several duplicate texts - removed HTML tags from $PALANG texts - several translation updates - + documentation updates: - SECURITY.TXT: add note about templates_c directory - DOCUMENTS/POSTFIX_CONF.TXT is now executable and can generate the mysql_*.cf maps for postfix - + Debian packaging: - Changed source format to 3.0 (quilt) - simplified the DB credential patch and removing ucf registrations on package @@ -340,7 +339,7 @@ ---------------------------------------------------------------- - fix SQL injection in pacrypt() (if $CONF[encrypt] == 'mysql_encrypt') - - fix SQL injection in backup.php - the dump was not mysql_escape()d, + - fix SQL injection in backup.php - the dump was not mysql_escape()d, therefore users could inject SQL (for example in the vacation message) which will be executed when restoring the database dump. WARNING: database dumps created with backup.php from 2.3.4 or older might @@ -458,7 +457,7 @@ - changed vacation.pl syslog facility from "user" to "mail" - added config option for postregsql database port - added config option to enable/disable XMLRPC interface (default: off) - - Fix check/query for alias with enabled vacation in vacation.pl + - Fix check/query for alias with enabled vacation in vacation.pl - Fix db_get_boolean() to return t/f for postgresql, not true/false - Fix missing quoting for boolean values in SQL queries at various places - Allow SHA courier-authlib passwords @@ -483,7 +482,7 @@ - Improvements to the setup process - Far better Debian packaging (we hope!) which should make installation much, much easier. - - Various bug fixes + - Various bug fixes - Performance enhancements (or we fixed the regressions ...) in domain listing etc. Version 2.3rc4 - 2009/04/18 - SVN r632 @@ -495,7 +494,7 @@ to this page. Password is encrypted, and setup.php can be used to generate the initial value. - Fix undefined variables problem(s) - Fix PostgreSQL date timestamp issues... - + Version 2.3rc3 - 2009/04/06 - SVN r611 -------------------------------------- @@ -508,7 +507,7 @@ - Refactor /users (see /model) and provide XmlRpc interface for remote mail clients (e.g. squirrelmail-postfixadmin) - - Add dovecotpw support - see: + - Add dovecotpw support - see: https://sourceforge.net/tracker/index.php?func=detail&aid=2607332&group_id=191583&atid=937966 - Add unit tests for model/ directory (see /tests) - Add additional scripts to ADDITIONS @@ -523,7 +522,7 @@ ----------------------------------------- - added support for domain aliases (from lenix) (can be disabled with $CONF['alias_domain']) - Important: If you update from a previous version, you'll have to adapt your postfix + Important: If you update from a previous version, you'll have to adapt your postfix configuration (see DOCUMENTS/POSTFIX_CONF.txt) - or just disable alias domain support, your postfix configuration will continue to work - updated postfix example configuration for domain aliases and to use the new mysql map format @@ -545,7 +544,7 @@ - added clear error message for non-resolvable domains when creating mailboxes or aliases - check for non-resolvable domains on domain creation - new option $CONF['create_mailbox_subdirs_prefix'] for compatibility with more IMAP servers - - added support for mysql encrypt() password encrpytion + - added support for mysql encrypt() password encrpytion - fix "illegal mix of collations" problem in MySQL by explicitely setting the charset everywhere - fix: cleanup vacation_notification table when disabling vacation - fix: config and fetchmail tables now honor $CONF['database_tables'] @@ -608,20 +607,20 @@ - Added: Slovakian language posted on SourceForge by eszabo - Changed: searches include mailbox.name matches (GregC) - Fixed: function check_email will ignore vacation_domain if vacation==YES (GregC) - - Changed: applied patches from Christian Boltz posted at + - Changed: applied patches from Christian Boltz posted at http://www.cboltz.de/tmp/postfixadmin-3.patch, referenced at https://sourceforge.net/tracker/index.php?func=detail&aid=1696647&group_id=191583&atid=937966 (GregC) - Added: main.php to admin dirctory (GregC) - Added: Item "Main" on admin menu (GregC) - Changed: Edit-vacation now edits for admins/superadmins (GregC) - - Added: Do not store local copy when forward mail. (Mihau) [24] + - Added: Do not store local copy when forward mail. (Mihau) [24] - Added: Virtual Vacation for PostgreSQL. (Tarvin) - Added: Virtual Vacation 3.2 (Thanx David) - - Added: SUBJECT tag for Virtual Vacation. + - Added: SUBJECT tag for Virtual Vacation. - Added: Dovecot setup document for Postfix Admin. (Thanx Massimo) - Added: SquirrelMail plugin to change_password. - Changed: Starting to merge /admin in root. (Mihau) - - Changed: Moved some TXT files to DOCUMENTS. + - Changed: Moved some TXT files to DOCUMENTS. - Changed: Updated tw.lang. (Thanx Bruce) - Fixed: Usage of mysql_real_escape_string(). (Mihau) - Fixed: Calculating of quotas. (Mihau) @@ -819,8 +818,8 @@ - Added: Option to completely control the stored aliases. (Thanx Alex) - Changed: config.inc.php is renamed to config.inc.php.sample. (Thanx Alex) - Fixed: $PHP_SELF in config.inc.php and my_lib.php. (Thanx Jim) - + Version 1.5.0 -- 2003/05/28 ---------------------------- - Added: Support for "Back to Main Site" This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2014-09-12 11:12:10
|
Revision: 1688 http://sourceforge.net/p/postfixadmin/code/1688 Author: christian_boltz Date: 2014-09-12 11:12:08 +0000 (Fri, 12 Sep 2014) Log Message: ----------- changelog update Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2014-09-12 10:02:45 UTC (rev 1687) +++ trunk/CHANGELOG.TXT 2014-09-12 11:12:08 UTC (rev 1688) @@ -9,6 +9,19 @@ # Last update: # $Id$ +SVN changes since 3.0 beta1 (2.91) +---------------------------------- + +- AliasHandler: don't clean goto field when making alias inactive (bug#316) +- list-virtual: display quota even if $CONF[used_quotas] == NO (bug#307) +- vacation.pl: fix queries in vacation.pl (bug#315) +- fix query in AliasHandler getList which caused an empty list on some + systems (bug#313) +- fetchmail.pl: fix ssl extra options (cert check, cert path, fingerprint) +- fix logging (run setup.php to fix old log entries) (bug#317) +- fetchmail.php: change error_reporting() to exclude E_NOTICE (bug#322) +- fr.lang translation update (patch#123) + Version 3.0 beta1 (2.91) - 2014/05/06 - SVN r1670 ------------------------------------------------- This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2014-09-12 11:19:11
|
Revision: 1689 http://sourceforge.net/p/postfixadmin/code/1689 Author: christian_boltz Date: 2014-09-12 11:19:09 +0000 (Fri, 12 Sep 2014) Log Message: ----------- small clarification in changelog entry about vacation.pl sql Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2014-09-12 11:12:08 UTC (rev 1688) +++ trunk/CHANGELOG.TXT 2014-09-12 11:19:09 UTC (rev 1689) @@ -14,7 +14,7 @@ - AliasHandler: don't clean goto field when making alias inactive (bug#316) - list-virtual: display quota even if $CONF[used_quotas] == NO (bug#307) -- vacation.pl: fix queries in vacation.pl (bug#315) +- vacation.pl: fix postgresql queries in vacation.pl (bug#315) - fix query in AliasHandler getList which caused an empty list on some systems (bug#313) - fetchmail.pl: fix ssl extra options (cert check, cert path, fingerprint) This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2014-10-22 15:33:43
|
Revision: 1701 http://sourceforge.net/p/postfixadmin/code/1701 Author: christian_boltz Date: 2014-10-22 15:33:33 +0000 (Wed, 22 Oct 2014) Log Message: ----------- CHANGELOG.TXT: - update for r1690..1700 Revision Links: -------------- http://sourceforge.net/p/postfixadmin/code/1690 Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2014-10-22 15:12:08 UTC (rev 1700) +++ trunk/CHANGELOG.TXT 2014-10-22 15:33:33 UTC (rev 1701) @@ -15,13 +15,15 @@ - AliasHandler: don't clean goto field when making alias inactive (bug#316) - list-virtual: display quota even if $CONF[used_quotas] == NO (bug#307) - vacation.pl: fix postgresql queries in vacation.pl (bug#315) -- fix query in AliasHandler getList which caused an empty list on some - systems (bug#313) +- fix query in AliasHandler getList() which caused an empty list and init() + which breaks deleting aliases in MariaDB (bug#313, bug#325) - fetchmail.pl: fix ssl extra options (cert check, cert path, fingerprint) - fix logging (run setup.php to fix old log entries) (bug#317) - fetchmail.php: change error_reporting() to exclude E_NOTICE (bug#322) -- fr.lang translation update (patch#123) -- $CONF[default_aliases] can now use the new domain as alias target (patch#124) +- translation updates: fr (patch#123), nl (patch#122) +- $CONF[default_aliases] can now use the new domain as alias target (patch#124) +- check that vacation start/end date are not in the past (patch#122) +- update vacation INSTALL.TXT with more secure locations Version 3.0 beta1 (2.91) - 2014/05/06 - SVN r1670 ------------------------------------------------- This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2016-03-27 20:12:51
|
Revision: 1831 http://sourceforge.net/p/postfixadmin/code/1831 Author: christian_boltz Date: 2016-03-27 20:12:49 +0000 (Sun, 27 Mar 2016) Log Message: ----------- update changelog with changes up to r1830 Revision Links: -------------- http://sourceforge.net/p/postfixadmin/code/1830 Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2016-03-21 22:14:29 UTC (rev 1830) +++ trunk/CHANGELOG.TXT 2016-03-27 20:12:49 UTC (rev 1831) @@ -9,6 +9,22 @@ # Last update: # $Id$ +Changes since 3.0 beta3 +------------------------------------------------- + + - add sqlite backend option + - language update: tw, cs + - fix escaping in gen_show_status() (could be used to DOS list-virtual by + creating a mail address with special chars) + - list.tpl: base edit/editactive/delete links in list.tpl on $RAW_item to + avoid double escaping, and fix some corner cases + - editform.tpl: add {if} block for description column for easier customization + - use smarty html_options instead of select_options() + - remove advice about using SetEnv for database password + - include_once(config.local.php) instead of include()ing it to prevent include + loops if someone copies config.inc.php to config.local.php + - vacation.pl: encode wide-chars utf8 in mail body + Version 3.0 beta3 (2.93) - 2015/09/26 - SVN r1802 ------------------------------------------------- This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2016-09-09 20:20:12
|
Revision: 1860 http://sourceforge.net/p/postfixadmin/code/1860 Author: christian_boltz Date: 2016-09-09 20:20:09 +0000 (Fri, 09 Sep 2016) Log Message: ----------- update CHANGELOG.TXT to include changes up to r1859 Revision Links: -------------- http://sourceforge.net/p/postfixadmin/code/1859 Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2016-09-09 20:08:57 UTC (rev 1859) +++ trunk/CHANGELOG.TXT 2016-09-09 20:20:09 UTC (rev 1860) @@ -13,9 +13,12 @@ ------------------------------------------------- - add sqlite backend option - - language update: tw, cs + - add configurable smtp helo (CONF["smtp_client"]) + - new translation: ro (Romanian) + - language update: tw, cs, de - fix escaping in gen_show_status() (could be used to DOS list-virtual by creating a mail address with special chars) + - add CSRF protection for POST requests - list.tpl: base edit/editactive/delete links in list.tpl on $RAW_item to avoid double escaping, and fix some corner cases - editform.tpl: add {if} block for description column for easier customization @@ -23,7 +26,16 @@ - remove advice about using SetEnv for database password - include_once(config.local.php) instead of include()ing it to prevent include loops if someone copies config.inc.php to config.local.php - - vacation.pl: encode wide-chars utf8 in mail body + - vacation.pl: encode wide-chars utf8 in mail body, mime-decode original subject + - fix db_quota_text() for postgresql (concat() vs. ||) + - change default date for 'created' and 'updated' columns from 0000-00-00 + (which causes problems with MySQL strict mode) to 2000-01-01 + - allow punicode even in TLDs + - update Smarty to 3.1.29 + - add checks to login.php and cli to ensure database layout is up to date + - whitelist '-1' as valid value for postfixadmin-cli + - don't stripslashes() the password in pacrypt + - various small bugfixes Version 3.0 beta3 (2.93) - 2015/09/26 - SVN r1802 ------------------------------------------------- This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2016-09-19 15:26:35
|
Revision: 1871 http://sourceforge.net/p/postfixadmin/code/1871 Author: christian_boltz Date: 2016-09-19 15:26:33 +0000 (Mon, 19 Sep 2016) Log Message: ----------- update CHANGELOG.TXT: - add section about 3.0.1 Debian packages - import 2.3.8 CHANGELOG section from 2.3 branch Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2016-09-19 09:14:38 UTC (rev 1870) +++ trunk/CHANGELOG.TXT 2016-09-19 15:26:33 UTC (rev 1871) @@ -9,6 +9,12 @@ # Last update: # $Id$ +Version 3.0.1 - 2016/09/19 - SVN r1870 +------------------------------------------------- + + - add missing Smarty files to Debian package + (no changes to PostfixAdmin, therefore only released as Debian packages) + Version 3.0 - 2016/09/11 - SVN r1861 ------------------------------------------------- @@ -452,8 +458,21 @@ - postfixadmin.docs: removed redundant changelog file - debian/postfixadmin.postrm: Call wwwconfig scripts only if they are existing +Version 2.3.8 - 2015/10/07 - SVN r1814 (postfixadmin-2.3 branch) +---------------------------------------------------------------- + + - fix query to enable/disable alias in edit-mailbox for PostgreSQL (#311) + - don't prefill username in users/ login on failed logins - fixes (probably + harmless) XSS + - fix show_gen_status() to properly escape mail addresses in query (#356) + - fix escaping in create-admin, create-mailbox and fetchmail templates - + fixes (harmless) XSS on form validation errors + - don't echo the password back to the browser in the fetchmail form + - allow MariaDB in Debian package dependencies + Version 2.3.7 - 2014/02/20 - SVN r1651 (postfixadmin-2.3 branch) ---------------------------------------------------------------- + - SECURITY: fix SQL injection in show_gen_status() - lt.lang, da.lang translation update - when enabling/disabling a mailbox, also update the corresponding alias This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <chr...@us...> - 2017-02-08 20:11:20
|
Revision: 1892 http://sourceforge.net/p/postfixadmin/code/1892 Author: christian_boltz Date: 2017-02-08 20:11:18 +0000 (Wed, 08 Feb 2017) Log Message: ----------- changelog update Modified Paths: -------------- trunk/CHANGELOG.TXT Modified: trunk/CHANGELOG.TXT =================================================================== --- trunk/CHANGELOG.TXT 2017-02-08 19:31:42 UTC (rev 1891) +++ trunk/CHANGELOG.TXT 2017-02-08 20:11:18 UTC (rev 1892) @@ -12,11 +12,16 @@ Changes since the 3.0.1 release ------------------------------------------------- + - SECURITY: don't allow to delete protected aliases (CVE-2017-5930, PR#23) + - fix VacationHandler for PostgreSQL - AliasHandler: restrict mailbox subquery to allowed and specified domains to improve performance on setups with lots of mailboxes - allow switching between dovecot:* password schemes while still accepting passwords hashed using the previous dovecot:* scheme - FetchmailHandler: use a valid date as default for 'date' + - fix date formatting in non-english languages when using PostgreSQL + - debian packaging: improve dependencies, remove old templates_c/ files + - various small fixes Version 3.0.1 - 2016/09/19 - SVN r1870 ------------------------------------------------- This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |