summaryrefslogtreecommitdiff
path: root/index.php
AgeCommit message (Collapse)Author
2012-08-08- Fix (disable) request validation for spell and spell_html actionsAleksander Machniak
Consider action whitelist also for ajax requests Conflicts: CHANGELOG index.php
2012-08-08- Check request tokens also in devel_modeAleksander Machniak
Conflicts: index.php
2012-08-05We're moving towards a stable releaseThomas Bruederli
2012-07-05Plugin API: Add 'unauthenticated' hook (#1488138)Aleksander Machniak
2012-06-30Show explicit error message when provided hostname is invalid (#1488550)Aleksander Machniak
Conflicts: program/include/rcmail.php
2012-04-27- Applied fixes from trunk up to r6129alecpl
2012-04-13cleanup release branch; update versionsthomascube
2012-01-18Changed license to GNU GPLv3+ with exceptions for skins and pluginsthomascube
2012-01-16Merged devel-framework branch (r5746:5779) back into trunkthomascube
2012-01-03- Move some checks into login() methodalecpl
2011-12-07- Remove deprecated global $IMAP variable usage (#1488148)alecpl
2011-11-24- Change version number to 0.8-svnalecpl
2011-10-30Allow cross-task ajax requeststhomascube
2011-10-07- Plugin API: added 'ready' hook (#1488073)alecpl
2011-09-29We're on the road towards 0.7 nowthomascube
2011-09-23- Make the whole PHP output non-cacheable (#1487797)alecpl
2011-08-24Fix r5117: don't show error on default login pagethomascube
2011-08-24Don't rely on rcmail->task for session error check; use _REQUEST data insteadthomascube
2011-07-30Don't show session error message on logoutthomascube
2011-07-30Log session validation errors; keep error message when redirecting to login ↵thomascube
after session error
2011-05-24Let plugins hook into keep-alive requeststhomascube
2011-05-02Default action for plugin tasks is 'index'thomascube
2011-04-20- Improve performance by including files with absolute path (#1487849) alecpl
2011-03-22Revert r4609 and use stateless request tokens; no need to save them in ↵thomascube
session and thus no keep-alive necessary; fixes #1487829
2011-03-15Keep session alive while showing login page (request token is stored in ↵thomascube
session data)
2011-03-08- small code cleanupalecpl
2011-03-08- Performance improvement: Remove redundant DELETE query (for old session ↵alecpl
deletion) on login
2011-02-08Also check referer on logout actionthomascube
2011-02-08Add optional referer check to prevent CSRF in GET requeststhomascube
2011-02-03protect login form submission from CSRF using a request tokenthomascube
2011-01-28Improve session validity check with changing auth cookies; reduce writes to ↵thomascube
DB; better phpdoc
2011-01-19Better fix for login redirect, don't force mail taskthomascube
2011-01-16- Move action files map from index.php to steps' func.inc filesalecpl
2011-01-14Fix login redirect issues (#1487686)thomascube
2011-01-12Bumbed version; Roundcube development is not Switzerland onlythomascube
2011-01-06Make sure an existing session is killed/replaced when submitting login formthomascube
2010-12-03- New Folder Manager UIalecpl
- Fix invalid Request when creating a folder (#1487443) - Add folder size and quota indicator in folder manager (#1485780) - Add possibility to move a subfolder into root folder (#1486791)
2010-11-29- Plugin API: Add 'pass' argument in 'authenticate' hook (#1487134)alecpl
2010-11-09- Handle situation when $IMAP object isn't initialized on log inalecpl
2010-10-14- Improved IMAP errors handlingalecpl
2010-10-01- Fix "Server Error! (Not Found)" when using utils/save-pref action (#1487023)alecpl
2010-09-25- s/RoundCube/Roundcube/alecpl
2010-09-17- Fix list_cols is not updated after column dragging (#1486999)alecpl
- Improved save-pref action and moved to separate file in utils task directory - Improved http_post/http_request to support first argument in form 'task/action'
2010-08-07Fix unit tests + update versionthomascube
2010-06-23- removed PHP closing tagalecpl
2010-06-03Allow plugins to register their own tasksthomascube
2010-04-20- Add HTTP_X_REAL_IP and HTTP_X_FORWARDED_FOR to successful logins log ↵alecpl
(#1486441)
2010-04-01Add server-side plugin hooks to address group functions + better action namesthomascube
2010-03-31Asynchronously expand contact groups + skip count queries in autocompletion ↵thomascube
mode + check for the existance of contactgroups table
2010-03-31Implement group renaming/deleting + use more consistent names for commands ↵thomascube
and actions (#1486587)
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-31 13:24:15 +0000