Nabble - squirrelmail-devel

Error message on reply

2009-10-28T03:37:56Z

Hi,

I think I discovered a bug in squirrelmail. I´m using it with dovecot,
and most features work ok.

However, I encounter an error message everytime I reply to a mail. The
short error is: "Could not append message to Sent. Server responded:
RED)".

This doesn´t happen when creating a new mail, only in responding. I changed
functions/imap_general.php to get the full response from server, what is:

* FLAGS (\Answered \Flagged \Deleted \Seen \Draft $MDNSent KMAILFORWARDED
KMAILTODO KMAILWATCHED KMAILIGNORED $FORWARDED $TODO $WATCHED $IGNORED)

Obviously, the "NO" from "IGNORED" / "KMAILIGNORED" makes the term
<preg_match("/(.*)(BAD|NO)(.*)$/"> to fail.

Think there should be a \b before and after the (BAD|NO):

"/(.*)\b(BAD|NO)\b(.*)$/"

This way it only fails when "NO"/"BAD" is on a word boundary, not within
other words.

Thanks,
Sebastian

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: chech_referrer not working

2009-10-12T14:41:08Z

On Mon, Oct 12, 2009 at 12:13 PM, Fernando Gozalo <fgozalo@...> wrote:

> Hello:
>
> I'm testing new check_referrer functionality. It doesn't work for me. I
> think the problem is that
>
> 1. the global var $check_referrer is modify inside is_logged_in() function,
> and
> 2. is_logged_in() is called twice in webmail.php: one in the included
> validate.php and another one in webmail.php itself.
>
> I attach a patch that address 1.
>
> And I think the call to is_logged_in() inside webmail.php must be removed
> because is_logged_in() is already called in the included validate.php.

Thank you for your testing. I believe the main problem is the second
one. I have fixed this in CVS, thanks to you. This makes the changes
in number one above unnecessary, but I think they are also a good
suggestion, so I'll probably add them.

Cheers,

Paul

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

chech_referrer not working

2009-10-12T12:13:20Z

Hello:

I'm testing new check_referrer functionality. It doesn't work for me. I
think the problem is that

1. the global var $check_referrer is modify inside is_logged_in()
function, and
2. is_logged_in() is called twice in webmail.php: one in the included
validate.php and another one in webmail.php itself.

I attach a patch that address 1.

And I think the call to is_logged_in() inside webmail.php must be
removed because is_logged_in() is already called in the included
validate.php.

Regards,
Fernando.

--- functions/auth.original.php 2009-10-12 13:09:46.088235997 +0200
+++ functions/auth.php 2009-10-12 13:34:37.235967000 +0200
@@ -62,15 +62,15 @@ function is_logged_in() {
global $check_referrer, $domain;
if ($check_referrer == '###DOMAIN###') $check_referrer = $domain;
if (!empty($check_referrer)) {
- $ssl_check_referrer = 'https://' . $check_referrer;
- $check_referrer = 'http://' . $check_referrer;
+ $ssl_chk_ref = 'https://' . $check_referrer;
+ $chk_ref = 'http://' . $check_referrer;
}
if (!sqgetGlobalVar('HTTP_REFERER', $referrer, SQ_SERVER)) $referrer = '';
if (sqsession_is_registered('user_is_logged_in')
&& (!$check_referrer || empty($referrer)
|| ($check_referrer && !empty($referrer)
- && (strpos(strtolower($referrer), strtolower($check_referrer)) === 0
- || strpos(strtolower($referrer), strtolower($ssl_check_referrer)) === 0)))) {
+ && (strpos(strtolower($referrer), strtolower($chk_ref)) === 0
+ || strpos(strtolower($referrer), strtolower($ssl_chk_ref)) === 0)))) {
return;
} else {

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Allowing anchors when displaying HTML messages

2009-10-04T16:55:02Z

All,

https://sourceforge.net/tracker/index.php?func=detail&aid=2864736&group_id=311&atid=100311

Anchors to another part of any HTML message are replaced with
blank.png, because SM thinks there is no valid URL in the href.

The attached patch is a quick hack to allow anchors through,
although it has not been evaluated for abuse potential and the anchor
still opens up in a new window (which would be much more involved to
fix, as the whole Magic HTML code seems to assume that's the only
option you'd ever want).

If anyone can comment or improve upon this, that would be nice.

-Paul

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

allow_anchors-1.4.diff (1K) Download Attachment
allow_anchors-1.5.diff (1K) Download Attachment

Re: [1.4.20RC2] case exact match in decodeheader

2009-10-03T23:52:35Z

Hi,

In message <58191e420910032210ob8e1c12s275f2bed213191f@...>
on Sat, 3 Oct 2009 22:10:44 -0700,
Paul Lesniewski <paul@...> wrote:
>> - if (preg_match('/=\?([^?]+)\?(q|b)\?([^?]+)\?=/', $ret))
>> + if (preg_match('/=\?([^?]+)\?(Q|B)\?([^?]+)\?=/Ui', $ret))
The patch was provided by obache at NetBSD.org.

> Kanbe-san, thank you. Looks like I forgot to add the i modifier in a
> couple places where eregi() was being replaced. However, unless you
> can prove otherwise, I believe the U modifier does nothing here, so it
Yes, I think that U modifier isn't needed unless the string is really
correctly encoded and I don't have such a wrong case. Probably, U
modified was added as other lines which make matching to MIME B/Q
encoding.

> is being left out. This has been committed. Thank you.
Thanks for your quick action!

--
Takahiro Kambe <taca@...>

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: [1.4.20RC2] case exact match in decodeheader

2009-10-03T22:10:44Z

On Sat, Oct 3, 2009 at 7:35 PM, Takahiro Kambe <taca@...> wrote:

> Hi,
>
> my acquaintance find there is a case exact match in processing
> decoding encoded header.
>
> This problem still exists in 1.4.20RC2 and affects replying/forwarding
> a mail.
>
> Attached patch fix the problem. Case of "q|b" part has changed to the
> same as other regular expressions.

> - if (preg_match('/=\?([^?]+)\?(q|b)\?([^?]+)\?=/', $ret))
> + if (preg_match('/=\?([^?]+)\?(Q|B)\?([^?]+)\?=/Ui', $ret))

Kanbe-san, thank you. Looks like I forgot to add the i modifier in a
couple places where eregi() was being replaced. However, unless you
can prove otherwise, I believe the U modifier does nothing here, so it
is being left out. This has been committed. Thank you.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

[1.4.20RC2] case exact match in decodeheader

2009-10-03T19:35:29Z

Hi,

my acquaintance find there is a case exact match in processing
decoding encoded header.

This problem still exists in 1.4.20RC2 and affects replying/forwarding
a mail.

Attached patch fix the problem. Case of "q|b" part has changed to the
same as other regular expressions.

Best regards.

--
Takahiro Kambe <taca@...>

--- functions/i18n.php.orig 2009-07-29 11:21:06.000000000 +0900
+++ functions/i18n.php 2009-10-04 10:17:48.000000000 +0900
@@ -675,7 +675,7 @@
break;
case 'decodeheader':
$ret = str_replace("\t", "", $ret);
- if (preg_match('/=\?([^?]+)\?(q|b)\?([^?]+)\?=/', $ret))
+ if (preg_match('/=\?([^?]+)\?(Q|B)\?([^?]+)\?=/Ui', $ret))
$ret = @mb_decode_mimeheader($ret);
$ret = @mb_convert_encoding($ret, 'EUC-JP', 'AUTO');
break;

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Undelete button missing from 1.4.20 [SVN] when $auto_expunge is false

2009-10-02T02:15:28Z

I made the following change to functions/mailbox_display.php to fix it.

echo getButton('SUBMIT', 'delete',_("Delete")) ." \n";
+if (!$auto_expunge) {
+ echo getButton('SUBMIT', 'undeleteButton',_("Undelete")) . "\n";
+}

--
Michael

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: Another problem with "search results expired"

2009-09-19T06:55:51Z

On Fri, 18 Sep 2009 14:22:49 +0100 (BST), Neil Hoggarth
<neil.hoggarth@...> wrote:

>I have found another code path which can give rise to the "ERROR - This
>page request could not be verified and appears to have expired" problem
>in src/search.php, in both 1.4.20-RC2 and SM-1_4-STABLE SVN branch.

Confirmed, patched, committed.

Thanks
--
Jonathan Angliss
<jon@...>

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Another problem with "search results expired"

2009-09-18T06:22:49Z

I have found another code path which can give rise to the "ERROR - This
page request could not be verified and appears to have expired" problem
in src/search.php, in both 1.4.20-RC2 and SM-1_4-STABLE SVN branch.

To reproduce:

1. Perform a search.

2. Select a message from the search results (taking us to
src/read_body.php).

3 Click the "Delete" link above the message headers (taking us to
src/delete_message.php, with a valid smtoken).

4. src/delete_message.php does delete the message, but then generates a
redirect to src/search.php without including an smtoken in the URL.

Proposed patch, which seems to fix things for our installation (diff -u
against SM-1_4-STABLE branch, r13840):

--- src/delete_message.php~ 2009-09-18 13:58:23.000000000 +0100
+++ src/delete_message.php 2009-09-18 13:58:46.000000000 +0100
@@ -78,6 +78,7 @@

if (isset($where) && isset($what)) {
header("Location: $location/search.php?where=" . $where .
+ '&smtoken=' . sm_generate_security_token() .
'&what=' . $what . '&mailbox=' . urlencode($mailbox));
} else {
if (!empty($saved_draft) || !empty($mail_sent)) {

Regards,
--
Neil Hoggarth -------------- Department of Physiology, Anatomy and Genetics
Head of IT --------------------------------------- University of Oxford, UK

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Proposed change to encodeHeader()

2009-09-15T17:09:59Z

All,

I was looking into a problem where encoded FROM headers weren't
being quoted, which causes problems when replying if they have a comma
in them. US-ASCII (non-encoded) FROM headers are always encased in
quotes for this very reason I believe (in case a comma is found
within).

It depends on the charset/encoding in question (any language can
provide its own encoding via XTRA_CODE in the language setup (I didn't
check those routines), and other multibyte character sets use the
encodeHeaderBase64() function), but if the code in encodeHeader() is
used, quotes around the full name part of the email address can cause
problems because they are not always encoded. I didn't dissect the
code in this function (which is why I'm asking), but found that adding
a simple test for quotes "fixes" this issue.

--- functions/mime.php (revision 13833)
+++ functions/mime.php (working copy)
@@ -789,6 +789,7 @@
for($i = 0; $i < $j; ++$i) {
switch($string{$i})
{
+ case '"':
case '=':
case '<':
case '>':

What I'd like to know is what the consequences are of making this
change - does this have possible large effects on anything else? Or
is it just a matter of performance (the function seems to try to be as
"ungreedy" as possible, only encoding things that don't have 8-bit
characters in them)? Please see the full patch attached to this
message that puts quotes around encoded full name-style FROM headers.
See also the two bug reports about this problem:

http://thread.gmane.org/gmane.mail.squirrelmail.user/36501
https://sourceforge.net/tracker/index.php?func=detail&aid=2830141&group_id=311&atid=100311

Thanks,

Paul

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

quote_encoded_addresses.diff (2K) Download Attachment

Re: PHP Notice in 1.5.2 regarding $use_js

2009-09-13T12:13:46Z

On Sat, 12 Sep 2009 13:52:05 -0700, Paul Lesniewski
<paul@...> wrote:

>On Sat, Sep 12, 2009 at 1:32 PM, Paul Lesniewski <paul@...> wrote:
>> All,
>>
>> I am trying to remember about the $use_js variable that I think we
>> (mostly) purged from somewhere else a few months back. It got left in
>> templates/default/addressbook_search_form.tpl and is causing a PHP
>> notice. To see it, go to compose a message, click the address button
>> (you have to have the in-page address book functionality, not the
>> javascript popup), add an address and return to your compose page.
>> You'll see the notice at the bottom now:
>>
>> Category: PHP, Delayed
>> Message: Undefined variable: use_js
>> FILE: /var/www/html/sm_cvs_pure/squirrelmail/templates/default/addressbook_search_form.tpl
>> LINE: 69
>>
>> I know we had a discussion about $use_js a few months ago, and IIRC,
>> Jon was the one who fixed the problem. I cannot remember if it is
>> safe to replace $use_js with our normal $javascript_on or not. Can
>> someone remember better than me? (IIRC, $use_js had some logic on top
>> of just $javascript_on.... maybe something to do with whether or not
>> the user had intended to use the JavaScript address popup, yeah that
>> must be it)
>
>I think I got it. Jon's commit was here:
>
>http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13713
>
>Please verify that my replacement of $use_js with the following is correct.
>
> if ($javascript_on && $compose_addr_pop)

I believe that would be the correct handling. If I remember correct,
you can even skip the javascript_on, but I'd have to double check all
the template vars, and how they get passed in.
--
Jonathan Angliss
<jon@...>

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: PHP Notice in 1.5.2 regarding $use_js

2009-09-12T13:52:05Z

On Sat, Sep 12, 2009 at 1:32 PM, Paul Lesniewski <paul@...> wrote:

> All,
>
> I am trying to remember about the $use_js variable that I think we
> (mostly) purged from somewhere else a few months back. It got left in
> templates/default/addressbook_search_form.tpl and is causing a PHP
> notice. To see it, go to compose a message, click the address button
> (you have to have the in-page address book functionality, not the
> javascript popup), add an address and return to your compose page.
> You'll see the notice at the bottom now:
>
> Category: PHP, Delayed
> Message: Undefined variable: use_js
> FILE: /var/www/html/sm_cvs_pure/squirrelmail/templates/default/addressbook_search_form.tpl
> LINE: 69
>
> I know we had a discussion about $use_js a few months ago, and IIRC,
> Jon was the one who fixed the problem. I cannot remember if it is
> safe to replace $use_js with our normal $javascript_on or not. Can
> someone remember better than me? (IIRC, $use_js had some logic on top
> of just $javascript_on.... maybe something to do with whether or not
> the user had intended to use the JavaScript address popup, yeah that
> must be it)

I think I got it. Jon's commit was here:

http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13713

Please verify that my replacement of $use_js with the following is correct.

if ($javascript_on && $compose_addr_pop)

My commit is here:

http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13843

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

PHP Notice in 1.5.2 regarding $use_js

2009-09-12T13:32:48Z

All,

I am trying to remember about the $use_js variable that I think we
(mostly) purged from somewhere else a few months back. It got left in
templates/default/addressbook_search_form.tpl and is causing a PHP
notice. To see it, go to compose a message, click the address button
(you have to have the in-page address book functionality, not the
javascript popup), add an address and return to your compose page.
You'll see the notice at the bottom now:

Category: PHP, Delayed
Message: Undefined variable: use_js
FILE: /var/www/html/sm_cvs_pure/squirrelmail/templates/default/addressbook_search_form.tpl
LINE: 69

I know we had a discussion about $use_js a few months ago, and IIRC,
Jon was the one who fixed the problem. I cannot remember if it is
safe to replace $use_js with our normal $javascript_on or not. Can
someone remember better than me? (IIRC, $use_js had some logic on top
of just $javascript_on.... maybe something to do with whether or not
the user had intended to use the JavaScript address popup, yeah that
must be it)

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: Squirrelmail work with Lightppd in Debian Lenny?

2009-09-05T07:51:11Z

2009.09.05 13:35 wenyang zhou rašė:

> Hi guys,
>
> I am using a Postfix mail server here. it's working fine for around one
> year. Recently I upgrade the Operation systerm from Debian Etch to Lenny.
> So
> I will need to reinstall the mail server. I followed the tutorial from
> here:
> http://workaround.org/ispmail/lenny
> Every step goes all right and I am going to install the Squirrelmail as
> webmail. But I met a trouble. I am using the Lighttpd1.4+php5 as a
> webserver
> but it seems Squirrelmail always work with Apache? I googled a lot but I
> didn't find much useful refernce there.
> So I would like to ask if there is any idea how to configure the
> Squirrelmail on Lighttpd?

http://www.php.net/manual/en/install.unix.lighttpd-14.php
http://redmine.lighttpd.net/projects/lighttpd/wiki/HowTos

SquirrelMail should work with any webserver, if server allows to use PHP
scripts.

--
Tomas

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: Squirrelmail work with Lightppd in Debian Lenny?

2009-09-05T04:17:18Z

On Sat, 5 Sep 2009 18:35:26 +0800
wenyang zhou <williamnicelabel@...> wrote:

> So I would like to ask if there is any idea how to configure the
> Squirrelmail on Lighttpd?

You should try squirrelmail-users mailing list.

This is the SquirrelMail Development Mailing List: For discussing the
development of SquirrelMail and patches.

http://www.squirrelmail.org/docs/admin/admin-12.html

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Squirrelmail work with Lightppd in Debian Lenny?

2009-09-05T03:35:26Z

Hi guys,

I am using a Postfix mail server here. it's working fine for around one year. Recently I upgrade the Operation systerm from Debian Etch to Lenny. So I will need to reinstall the mail server. I followed the tutorial from here:
http://workaround.org/ispmail/lenny
Every step goes all right and I am going to install the Squirrelmail as webmail. But I met a trouble. I am using the Lighttpd1.4+php5 as a webserver but it seems Squirrelmail always work with Apache? I googled a lot but I didn't find much useful refernce there.
So I would like to ask if there is any idea how to configure the Squirrelmail on Lighttpd?

Thanks for any reply in advance!

Best Regards,
William

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-04T01:52:54Z

On Fri, Sep 4, 2009 at 1:36 AM, Ralf
Hildebrandt<Ralf.Hildebrandt@...> wrote:
> * Paul Lesniewski <paul@...>:
>
>> Because Exchange is doing something funny that the plugin does not
>> expect. SM can probably display it OK without the plugin installed
>> (you can test).
>> You can try sending the full message source, although without an
>> Exchange server I may not be able to do much with it.
>
> Do you have any preferred format? Maybe some raw IMAP output?

If possible, yes, the raw message right from the mail spool. As long
as it isn't getting corrupted by the time it gets to SquirrelMail, the
message details plugin will give you the message source and allow you
to save it to a file.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-04T01:36:46Z

* Paul Lesniewski <paul@...>:

> Because Exchange is doing something funny that the plugin does not
> expect. SM can probably display it OK without the plugin installed
> (you can test).
> You can try sending the full message source, although without an
> Exchange server I may not be able to do much with it.

Do you have any preferred format? Maybe some raw IMAP output?

--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebrandt@... | http://www.charite.de

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-04T01:32:39Z

On Fri, Sep 4, 2009 at 12:30 AM, Ralf
Hildebrandt<Ralf.Hildebrandt@...> wrote:

> * Paul Lesniewski <paul@...>:
>
>> Looks like you are not using the most up to date version of the
>> plugin. Please use what is on the SquirrelMail website and report
>> back.
>
> I installed 0.7 now:
>
> Version 0.7
> by Paul Lesniewski on Sep 20, 2008
> [ smime-0.7-1.1.1.tar.gz tarball (1172 d/l) Help ]
> Requires: OpenSSL, SquirrelMail 1.1.1+
>
> same error.
>
>> If the problem persists, it is due to the fact that when the IMAP
>> server reports the signature as an attachment (in your case only
>> Exchange seems to do so), it tries to remove the signature attachment
>> from the message (in memory, not on the server) so when the message is
>> displayed, it is shown without that extraneous attachment.
>
> Hm, but why is mutt able to display the message correctly then?

Because Exchange is doing something funny that the plugin does not
expect. SM can probably display it OK without the plugin installed
(you can test). You can try sending the full message source, although
without an Exchange server I may not be able to do much with it.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-04T00:30:10Z

* Paul Lesniewski <paul@...>:

> Looks like you are not using the most up to date version of the
> plugin. Please use what is on the SquirrelMail website and report
> back.

I installed 0.7 now:

Version 0.7
by Paul Lesniewski on Sep 20, 2008
[ smime-0.7-1.1.1.tar.gz tarball (1172 d/l) Help ]
Requires: OpenSSL, SquirrelMail 1.1.1+

same error.

> If the problem persists, it is due to the fact that when the IMAP
> server reports the signature as an attachment (in your case only
> Exchange seems to do so), it tries to remove the signature attachment
> from the message (in memory, not on the server) so when the message is
> displayed, it is shown without that extraneous attachment.

Hm, but why is mutt able to display the message correctly then?

--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebrandt@... | http://www.charite.de

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-04T00:23:58Z

* Paul Lesniewski <paul@...>:

> Looks like you are not using the most up to date version of the
> plugin. Please use what is on the SquirrelMail website and report
> back. If the problem persists, it is due to the fact that when the
> IMAP server reports the signature as an attachment (in your case only
> Exchange seems to do so), it tries to remove the signature attachment
> from the message (in memory, not on the server) so when the message is
> displayed, it is shown without that extraneous attachment.

the "plugin updates" plugin reports:

S/MIME verification (v0.7alpha1)
Is up to date.

ah, 0.7 is considered < 0.7alpha1 :(

--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebrandt@... | http://www.charite.de

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-04T00:21:36Z

* Benny Pedersen <me@...>:
> On tor 03 sep 2009 16:46:33 CEST, Fredrik Jervfors wrote
> > You might want to allow access to those two links.
>
> the url was there in shurt time, i see access denied aswell now
>
> Ralf have you resolved it ?

Huh? Both work. I checked them after I put the images up. They're
working now.

--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebrandt@... | http://www.charite.de

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-03T11:52:48Z

On Thu, Sep 3, 2009 at 6:55 AM, Ralf
Hildebrandt<Ralf.Hildebrandt@...> wrote:

> I have a VERY odd problem here with 1.4.20RC1 and 1.4.19:
>
> I'm sending a S/MIME signed mail to two email addresses. One of the
> accounts is on Postfix/Dovecot, the other on Exchange 2007
>
> * in Squirrelmail, I can read the mail on the Postfix/Dovecot system
> OK, it's displayed as text with the extra "this message is S/MIME
> signed"
> --> http://www.arschkrebs.de/bugs/ok_postamt.png
>
> * in Squirrelmail, I cannot (!) read the VERY SAME mail on the Exchange system
> it's displayed as signed, but it consists of an atachment
> "multipart/signed"
> --> http://www.arschkrebs.de/bugs/broken_exchange.png
>
> What is going on here?

Looks like you are not using the most up to date version of the
plugin. Please use what is on the SquirrelMail website and report
back. If the problem persists, it is due to the fact that when the
IMAP server reports the signature as an attachment (in your case only
Exchange seems to do so), it tries to remove the signature attachment
from the message (in memory, not on the server) so when the message is
displayed, it is shown without that extraneous attachment.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-03T07:54:28Z

On tor 03 sep 2009 16:46:33 CEST, Fredrik Jervfors wrote
> You might want to allow access to those two links.

the url was there in shurt time, i see access denied aswell now

Ralf have you resolved it ?

--
xpoint

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-03T07:46:33Z

> I have a VERY odd problem here with 1.4.20RC1 and 1.4.19:
>
> I'm sending a S/MIME signed mail to two email addresses. One of the
> accounts is on Postfix/Dovecot, the other on Exchange 2007
>
> * in Squirrelmail, I can read the mail on the Postfix/Dovecot system
> OK, it's displayed as text with the extra "this message is S/MIME
> signed" --> http://www.arschkrebs.de/bugs/ok_postamt.png
>
> * in Squirrelmail, I cannot (!) read the VERY SAME mail on the Exchange
> system it's displayed as signed, but it consists of an atachment
> "multipart/signed"
> --> http://www.arschkrebs.de/bugs/broken_exchange.png
>
> What is going on here?

You might want to allow access to those two links.

--
Fredrik Jervfors
The SquirrelMail Project
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donations.php

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: SMIME Plugin

2009-09-03T06:59:44Z

* Ralf Hildebrandt <Ralf.Hildebrandt@...>:

I was able to verify & display BOTH mails using mutt.

--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebrandt@... | http://www.charite.de

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

SMIME Plugin

2009-09-03T06:55:59Z

I have a VERY odd problem here with 1.4.20RC1 and 1.4.19:

I'm sending a S/MIME signed mail to two email addresses. One of the
accounts is on Postfix/Dovecot, the other on Exchange 2007

* in Squirrelmail, I can read the mail on the Postfix/Dovecot system
OK, it's displayed as text with the extra "this message is S/MIME
signed"
--> http://www.arschkrebs.de/bugs/ok_postamt.png

* in Squirrelmail, I cannot (!) read the VERY SAME mail on the Exchange system
it's displayed as signed, but it consists of an atachment
"multipart/signed"
--> http://www.arschkrebs.de/bugs/broken_exchange.png

What is going on here?

--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebrandt@... | http://www.charite.de

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: address_add plugin doesn't work with 1.4.20RC1

2009-09-02T13:10:02Z

On 9/2/2009 1:20 AM, Ralf Hildebrandt wrote:
> When I'm looking at a mail, I have a link saying:
> "Add to Addressbook"
>
...
>
> Clickin it results in "page request could not be verified and appears
> to have expired."
>
> Hmm, that plugin seems to be antique:
>

> address_add seems to be superseded by add_address :)
>

Exactly:

http://www.squirrelmail.org/plugin_view.php?id=269

Note that this is a replacement for both the "Address Add" and "Address
Take" (abook_take) plugins. You should deactivate those plugins if
migrating to this one.

Obsolete:
http://www.squirrelmail.org/plugins_category.php?category_id=10
http://www.squirrelmail.org/plugin_view.php?id=101

(Obsolete: See Add Address plugin)
This plugin allows you to easily add the sender of an email to your
address book via a small link placed next to the From address of an
email. If the first and last name are sent along with the email address,
it will input them also, so you don't have to. If the address is already
in your address book, the link is not shown.

--
Mike

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

address_add plugin doesn't work with 1.4.20RC1

2009-09-02T01:20:21Z

When I'm looking at a mail, I have a link saying:
"Add to Addressbook"

clicking it leads to a page saying "Add to Personal address book"

Nickname: Must be unique
E-mail address:
First name:
Last name:
Additional info:

and a button "Add adress"

Clickin it results in "page request could not be verified and appears
to have expired."

Hmm, that plugin seems to be antique:

Author ......... Jimmy Conner
Contact ........ jimmy@...
Home Site ...... http://www.sqmail.org/
Program ........ Address Add
Version ........ 2.1
Purpose ........ Allows you to add the From address to the address book

address_add seems to be superseded by add_address :)

--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebrandt@... | http://www.charite.de

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: Search results expired: part 2?

2009-09-01T23:49:28Z

On 9/1/09 11:01 PM, Paul Lesniewski wrote:

>
> Thanks for the heads-up. Here is the patch:
>
> http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/src/search.php?view=patch&r1=13835&r2=13834&pathrev=13835
>
>

Fix confirmed, thanks.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: Search results expired: part 2?

2009-09-01T23:01:29Z

On Mon, Aug 31, 2009 at 7:18 PM, Mike Cappella<lists-general@...> wrote:

> I'm seeing the same type of problem in 1.40.20RC2 that Ralf reported here:
>
> http://article.gmane.org/gmane.mail.squirrelmail.devel/9796
>
> but in the Recent Search area (links: save | search | forget ).
>
> Error
> This page request could not be verified and appears to have expired.
>
> I've applied the read_body.php patch here:
>
> http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13833
>
> and not the search.php patch as recommended later in the thread above.
> Did I miss something, or is this another instance of a regression due to
> the security changes?

Thanks for the heads-up. Here is the patch:

http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/src/search.php?view=patch&r1=13835&r2=13834&pathrev=13835

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: [Regression] search results expired?

2009-08-31T22:52:05Z

On Mon, Aug 31, 2009 at 6:35 PM, Jonathan Angliss<jon@...> wrote:

> On Sun, 30 Aug 2009 20:44:17 -0700, Paul Lesniewski
> <paul@...> wrote:
>
>>On Sun, Aug 30, 2009 at 4:55 PM, Jonathan Angliss<jon@...> wrote:
>>> On Sun, 30 Aug 2009 14:28:31 +0200, Ralf Hildebrandt
>>> <Ralf.Hildebrandt@...> wrote:
>>>
>>>>* Ralf Hildebrandt <Ralf.Hildebrandt@...>:
>>>>> Hi there!
>>>>>
>>>>> With 1.4.20RC1 I'm getting this error:
>>>>>
>>>>> * search for anything using the "Search" link (e.g. Subject contains "test")
>>>>> * I'm getting several results back
>>>>> * I'm choosing a mail at random, and have it displayed
>>>>> * I decide it's the wrong one and go back to the list of search results by
>>>>> clicking on the link labeled "Search results" which leads me to:
>>>>> https://webmail.example.com/squirrelmail/src/search.php?where=SUBJECT&what=test&mailbox=INBOX.Sent
>>>>> * I'm getting an error page in the right frame:
>>>>> "This page request could not be verified and appears to have expired."
>>>>>
>>>>> Could this be related to the recent changes in rc1 which are supposed
>>>>> to foil cross site scripting?
>>>>
>>>>I tried 1.4.19, it doesn't show that particular behaviour!
>>>
>>> That would be because of some new improved security. Thanks for the
>>> catch.
>>>
>>> http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13833
>>>
>>> src/read_body.php is really the only change I can see you needing for
>>> this issue. I did notice that the token validation only looked for
>>> GET whilst it passed in a post too, so I made a little change there in
>>> src/search.php as well.
>>
>>There are no forms using POST that point to src/search.php that I know
>>of. I switched it back.
>
> src/search.php posts to src/search.php. That being said, there is
> actually no method defined, so I guess the browser falls back to GET

Yeah

> instead? Interesting, wonder why that was done.

Probably so the "back to results" kind of links can be that: lnks and not forms

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Search results expired: part 2?

2009-08-31T19:18:05Z

I'm seeing the same type of problem in 1.40.20RC2 that Ralf reported here:

http://article.gmane.org/gmane.mail.squirrelmail.devel/9796

but in the Recent Search area (links: save | search | forget ).

Error
This page request could not be verified and appears to have expired.

I've applied the read_body.php patch here:

http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13833

and not the search.php patch as recommended later in the thread above.
Did I miss something, or is this another instance of a regression due to
the security changes?

Thanks,
Mike

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel

Re: [Regression] search results expired?

2009-08-31T18:35:28Z

On Sun, 30 Aug 2009 20:44:17 -0700, Paul Lesniewski
<paul@...> wrote:

>On Sun, Aug 30, 2009 at 4:55 PM, Jonathan Angliss<jon@...> wrote:
>> On Sun, 30 Aug 2009 14:28:31 +0200, Ralf Hildebrandt
>> <Ralf.Hildebrandt@...> wrote:
>>
>>>* Ralf Hildebrandt <Ralf.Hildebrandt@...>:
>>>> Hi there!
>>>>
>>>> With 1.4.20RC1 I'm getting this error:
>>>>
>>>> * search for anything using the "Search" link (e.g. Subject contains "test")
>>>> * I'm getting several results back
>>>> * I'm choosing a mail at random, and have it displayed
>>>> * I decide it's the wrong one and go back to the list of search results by
>>>> clicking on the link labeled "Search results" which leads me to:
>>>> https://webmail.example.com/squirrelmail/src/search.php?where=SUBJECT&what=test&mailbox=INBOX.Sent
>>>> * I'm getting an error page in the right frame:
>>>> "This page request could not be verified and appears to have expired."
>>>>
>>>> Could this be related to the recent changes in rc1 which are supposed
>>>> to foil cross site scripting?
>>>
>>>I tried 1.4.19, it doesn't show that particular behaviour!
>>
>> That would be because of some new improved security. Thanks for the
>> catch.
>>
>> http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13833
>>
>> src/read_body.php is really the only change I can see you needing for
>> this issue. I did notice that the token validation only looked for
>> GET whilst it passed in a post too, so I made a little change there in
>> src/search.php as well.
>
>There are no forms using POST that point to src/search.php that I know
>of. I switched it back.

src/search.php posts to src/search.php. That being said, there is
actually no method defined, so I guess the browser falls back to GET
instead? Interesting, wonder why that was done.
--
Jonathan Angliss
<jon@...>

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-devel@...
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel