$Horde: imp/docs/CHANGES,v 1.1.2.213 2002/03/28 16:53:16 bjn Exp $

------
v2.2.8
------

[bjn] SECURITY: CSS prevention (Nuno Loureiro <nuno@eth.pt>)
[bjn] Informix update (Gianni Pederiva <pederiva.g@atm.to.it>)
[bjn] Put text wrapping back.

  
------ 
v2.2.7
-------

security fix.

------
v2.2.6
------

[cjh] SECURITY: Add more hostile javascript: URL filters.
[bjn] SECURITY: Validate prefs.php3?new_lang=XX parameter before use.
[bjn] Lithuanian (lt) translation.  (Darius Matuliauskas <darius@lnk.lt>)


------
v2.2.5
------

[bjn] SECURITY: Use is_uploaded_file() function to validate all attachment
      uploads (prevent spoofing).
[bjn] SECURITY: Fix attachment upload to use tempnam().  (Jarno Huuskonen
      <Jarno.Huuskonen@uku.fi>)
[cjh] SECURITY: Fix attachment viewers to use tempnam().
[cjh] Fix mysql warning with php 4.0.7.
[max] Move all JavaScript URLs to the onclick event handler to prevent
      breaking IE SSL in certain circumstances.
[cjh] Add addslashes() to mysql db library.
[bjn] Bug 577: umask fixes to prevent world-writable /tmp files.
      (<andreas@conectiva.com.br>)
[bjn] Bug 517: Fixes for LDAP searching--bogus LDAP filters when some
      drop-downs were switched away from default values.  (Robert Marchand
      <robert.marchand@UMontreal.CA>)
[cjh] Allow '+' to terminate URLs.


------
v2.2.4
------

[cjh] SECURITY: Close a vulnerability in html attachments.
[avsm] Correct image dimensions in the message view to look normal again
[cjh] Updated Swedish translation (Joaquim Homrighausen
      <joho@webbplatsen.se>).
[cjh] Fix a problem with deleting messages under pop3.
[cjh] Don't output header/footer when a view function is defined.
[cjh] Fix downloading attachments under IE.
[avsm] Fix folder listing rendering under Netscape 6 and Mozilla
[avsm] Add Slovenkso locale, from Renato Rjavec <renato@kizej.net>
[cjh] Fixed some problems in mime_action_images().
[cjh] Fix unsubscribing from internationalized folder names.
[cjh] Make poppasswd form more generic.
[cjh] Add Catalan locale (CrisTiaN <sistemes@myp.ad>).
[bjn] Bug 527: Prevent JS error using "house" INBOX icon when user folders are
      disabled (as with POP3) <alain@cscoms.net>
[bjn] Bug 523: Don't set time limit when in safe mode, which is not allowed and
      produces a warning message <momchil@mail.bg>
[cjh] Add missing imap_utf7_encode() calls in saving and postponing messages.
[cjh] Add a few missing imap_utf7_* calls in message.php3.
[bjn] Bug 510: Inhibit both spell-check buttons (not just one) when ispell
      is disabled (Matt Kane <mkb@ele.uri.edu>).
[bjn] Bug 507: Set Sybase error severity above informational <oberon@home.com>.
[bjn] Bug 509: Display error messages from preferences <rcgraves@brandeis.edu>.
[cjh] Use strtotime() to format the date string, since we require a version
      of php that has it now (Jason Reeves <jhr@mp3.com>).
[cjh] Change the newmail popup so that once a popup is generated, the status
      frame won't auto-refresh anymore until it is reloaded.
[bjn] Defensive programming when saving a draft with no message text.
[cjh] Fix problems with db.sybase and the sybase_create.sql script.
[bjn] Bug 498: Handle NZ DST; thanks to <demian@coretech.co.nz>.
[bjn] New db.oci8 (Oracle) driver; thanks to Matt Kane <mkb@ele.uri.edu>.
[bjn] Bug 493: Fix mailbox.lang typo for French locale <benoit@proxad.net>.
[bjn] Bug 492: Supply missing addslashes() in message.php3 <benoit@proxad.net>.


------
v2.2.3
------

[bjn] Add Verdana and sans-serif to default font face (as in 2.3) to fix
      Mac IE5 "big fonts" problem.
[bjn] Do same field validation with update contacts as we do with add
[bjn] Bug 483: fix single quote handling for all three contacts fields
[bjn] Fix LDAP insert-into-contacts bugs (the ""John Q. Doe" " problem)
[cjh] Decode MIME attachment filenames.
[cjh] Tweak message saving to be more correct: Mathieu CLABAUT
      <mathieu.clabaut@free.fr>.
[cjh] German translation updates: Lars Hecking <lhecking@nmrc.ie>.
[cjh] Don't display text/richtext inline by default.
[iem] Adding korean locales thanks to Ho-seok Lee <lhs0@master.debian-kr.org>
[cjh] Fix typo for ldap searches on attributes other than cn.
[bjn] IfModule logic to support both PHP3 and PHP4 in httpd.conf files


------
v2.2.2
------

[cjh] attempt to solve contacts and quotes problem once and for all.
[cjh] respect the value of the TMPDIR environment variable in tmpdir().
[cjh] require lang.php3 before calling valid_lang().
[cjh] French translation update from Jean Charles Delepine
      <delepine@u-picardie.fr>.
[cjh] add missing addslashes() around onMouseOver text.
[cjh] treat 0 as "no refresh" for the status bar.
[cjh] remove pre tag from string in zh-tw locale.
[cjh] fix imp/locale/pl/mailbox.lang (Bohdan Horst <nexus@hoth.amu.edu.pl>).
[rtl] take out htmlentities/locale "fix" from 2.1
[rtl] always send character set, defaulting to iso-8859-1


------
v2.2.1
------

[cjh] SECURITY: fix file upload vulnerability.
[cjh] add missing string to locale/cs.
[avsm] Update javascript to clear status bar <tressens@etud.insa-tlse.fr>
[rtl] update translations to not contain entities in *.lang and *.help,
      and to contain entities in newuser*
[rtl] add htmlentities() throughout (except newuser*)
[cjh] fix logging of server/port information.
[cjh] fix compose.php3 to not open mailboxes read-only on replies.


------
v2.2.0
------

[cjh] fixing a bunch of call-time pass-by-reference uses.
[cjh] use a somewhat smarter mime-type-munging for file downloads.
[cjh] danish translation updates (Ren? Lund Jensen <lundeman@email.dk>).
[cjh] add language selection to lynx login template and remove some cruft.
[cjh] remove redundant wrap() function in message.php3
[avsm] updated Slovak locale from lubos klokner <erkac@vault-tec.sk>
[cjh] add missing translation for $lang->empty_mailbox to
      locale/pl/mailbox.lang.


------------
v2.2.0-pre14
------------

[cjh] bandaid for bug 403 - add Mime-Version: header to postponed messages.
[bjn] bug 407: exclude LDAP search results with empty email addresses
      <vader21@imsa.edu>.
[bjn] bug 406: display filename if Content-Description is empty
      <rich@alcor.concordia.ca>.
[bjn] bug 403a: ensure From: address is kept during Save Draft
      <rich@alcor.concordia.ca>.
[cjh] tweaks to the size of the compose window for se locale from
      Ola Lundqvist <ola.lundqvist@euronetics.se>.
[cjh] add spaces to open_compose_win links to prevent the line-wrapping code
      from mucking with links.
[cjh] recognize application/vnd.ms-excel for excel attachments as well.
[cjh] use serialized hashes instead of objects to avoid problems with
      php4.
[cjh] tweaks to the xlhtml support - if -m is needed, it should now be put
      in defaults.php3.
[cjh] updated French translations from <rich@alcor.concordia.ca>.
[cjh] added a missing set of parentheses in message.php3 logic.
[bjn] make wv-0.5.44 ("wvHtml") the default viewer; include config. file
      comments showing how to use older versions ("mswordview -o -").
[bjn] bug 391: remove all \n's from .lang files <rich@alcor.concordia.ca>.
[cjh] bug 394: the alt text for the status image now matches the status.
[cjh] reverted mime_view_msword to use MimeFetchContent.
[cjh] new Excel attachment viewing function that uses xlHtml.
[cjh] updated Russian locale.
[cjh] fix a problem with warnings in the folder list in some cases.
[cjh] the Date: and Resent-Date: headers now include the 3 char timezone
      comment.
[cjh] the Resent-Date: header is now RFC compliant.
[bjn] Dutch translations from steeman philip <philip.steeman@kh.khbo.be>.
[cjh] beefed up russian charset support.
[bjn] substantial documentation corrections.


------------
v2.2.0-pre13
------------

[bjn] option to warn the user about security if they're using the default
      database password.
[cjh] fix a problem with quotes and other escaped characters in fullnames.
[cjh] wrap all strings passed to javascript popups in addslashes().
[cjh] fix some errors that appeared with javascript off.
[cjh] improve attachment handling so that pdfs (and other types as well) can
      be handled better by the browser.
[cjh] fix bug when deleting most recently selected folder.
[jon] added $default->hide_deleted to hide deleted messages from the mailbox
      listing by default.  Defaults to false.
[cjh] remove the requirement for a message body before sending the message.
[cjh] fix get_barefrom() to fetch replyto addresses whenever
      $default->use_db is true, so that admins can set values in the db and
      lock it.
[cjh] impsetup.pl might actually work now. It needs to be updated for new
      options, but it shouldn't try and do things that aren't there anymore.
[cjh] changed $default->path_to_unzip to $default->path_to_zipinfo for
      consistency.
[cjh] handle "Lastname, Firstname" style addresses correctly when replying.
[cjh] have remote_login.php3 grab username info from $imapuser or $PATH_INFO
      (in that order) if either is there.
[cjh] fix selecting a new folder when cookies are disabled.
[cjh] set $default->use_db appropriately depending on the value of
      $default->database_driver.
[jon] make the compose window's date format configurable.
[cjh] fix a problem with displaying a first blank line of a signature.
[cjh] switch to YYYY-MM-DD in the mailbox.php3, and make the time and date
      format strings configurable in defaults.php3.
[cjh] make use of MimeFetchDecodedContent in several places that needed it.
[cjh] don't enable the mswordview mimetype if $default->path_to_mswordview
      is false, empty, or unset.
[cjh] fix a discrepancy between the links generated by clicking on the
      subject and clicking on the from link to read a message.
[cjh] commas are not supported in addresses in contacts.php3, so explicitly
      disallow them.
[cjh] fix javascript errors in contacts when fields were not filled out.
[cjh] added a fully-commented defaults.php3.dist, and removed some unused
      options.
[jon] updated swedish translations from Joaquim Homrighausen.

------------
v2.2.0-pre12
------------

[cjh] check for a language preference on login.
[cjh] updated norwegian translations from Hans Morten Kind <Kind@it.uib.no>.
[cjh] fix displaying of preferences containing non-ascii values by replacing
      calls to htmlentities() with htmlspecialchars().
[cjh] make the icon to show for multipart/alternative messages (usually html
      mail) configurable ($default->multipart_alternative_icon), and make
      the default not to show one.
[cjh] correct the amount of whitespace put into encoded strings by
      encode_mime_string.
[cjh] call setlocale according to the language being used.
[cjh] correct ispell strings for many languages, from
      Martin Köster <mk@ezl-data.dk>
[cjh] renamed locale/sv to locale/se for correctness with country codes.
[cjh] send charset values with the content-type header when we have them.
      this should vastly improve support for non-western (and even some
      western) languages.
[cjh] added Portuguese translation, from Miguel Cabeça <cabeca@jazznet.pt>
[cjh] use method=get in select.php3 to allow "back" to work properly
[cjh] hide the expunge/hide deleted links only in pop3 mode, not just when
      we're not using folders.
[cjh] added urls for patches to php to the install documentation, and made
      the use of the 'hordemgr' user a bit more consistent.
[cjh] uniq-ify compose links even when minimum_popups is being used.
[cjh] do some handling of badly-typed addresses (seperated by spaces, etc).
[cjh] use horde_cleanup() to make sure generated files are removed.
[cjh] locale/hu/ updated.
[cjh] Setting the umask and loading the db driver are now done in
      imp/lib/postconf.php3 - other things that need to be done after both
      the library files and conf files are loaded can go here.
[cjh] Display an appropriate message when the user is logged out due to
      changing their password.
[cjh] IE5 shouldn't miss the folder select frame anymore, or fail to update
      it.
[cjh] stopgap fix for the deletion of the wrong messages over pop3. ideally
      we wouldn't have to close and open the pop3 stream.
[cjh] added $default->text_inline_size to determine the max inline-able part
[cjh] the database library in use is now completely determined by
      $default->database_driver. db.lib is OBSOLETE.
[cjh] all libraries are now pre-built, to hopefully simplify installation.
[cjh] decode base64 parts when replying.
[cjh] add a MimeFetchDecodedContent() function.
[cjh] es updates from German Poo Caaman~o <gpoo@ubiobio.cl>


------------
v2.2.0-pre11
------------

[cjh] addcontact.php3 decodes and displays mime strings correctly now.
[cjh] addcontact.php3, contacts.php3, and prefs.php3 all now correctly quote
      or escape (as necessary) special characters in fullnames. This should
      increase rfc822 compliance quite a bit.
[cjh] Add locale/el (Greek), from Foteini Papagalou <foteinh@ccf.auth.gr>
[cjh] cache the results of all the mysql get_* pref functions. this needs to
      be done for other databases.
[cjh] cache the results of imp_check_prefs()
[cjh] Make sure that site-specific menu items are class="menuitem", and add
      an extra line between the normal menu items and them.
[jon] Set the umask ($default->umask) for the current process.
[cjh] Added imp/locale/nl/ translation <philip.steeman@kh.khbo.be>
[cjh] Fix warnings in addcontact.php3 and compose.php3 when
      $h->replyto_address was not set.
[jon] Changed the behavior of the "cancel message" button.  Clicking "Ok"
      now cancels the message.
[cjh] Show the correct background color on select.php3 when folders are
      disabled.
[cjh] The login screen does not reload when you choose a new language, if a
      username or password has been entered.
[cjh] Changing the protocol selected changes the port to the default port
      for that protocol.
[cjh] Fixed the javascript confirmation on deletion of folders.
[cjh] Keep folder subscriptions correctly up to date when a folder is renamed.
[cjh] Don't display an attachment inline unless it is set to disposition:
      inline, no matter any other settings.
[jon] Some buglet fixes from <giannici@neomedia.it>.
[jon] Italian language updates from <giannici@neomedia.it>.
[cjh] Addresses are now listed individually in the message screen, with a
      compose link and "add to contacts" link for each.
[cjh] Bahasa Indonedia locale updates/fixes <justin@peter.petra.ac.id>


------------
v2.2.0-pre10
------------

[cjh] Tweaking compose window sizes for pt-BR <gilberto@server3.visaonet.com.br>
[cjh] Slovak updates from Juraj Bednar <bednar@isternet.sk>
[cjh] If mailfrom() returns false, compose.php3 now at least tells the user
      there was an error instead of silently reloading.
[cjh] Frech locale updates from Jean Charles Delepine <delepine@u-picardie.fr>
[cjh] Changed $lang->pagenav to size the page navigator box dynamically
      depending on the number of pages.
[jon] Updated Italian language strings from <giannici@neomedia.it>.
[jon] Avoid some more Javascript errors. <chris@jeks.net>
[cjh] Added a $default->show_shared_hierarchy option to display the UW-imapd
      #shared/ folder hierarchy.


-----------
v2.2.0-pre9
-----------

[iem] Danish language updates thanks to Lars Juul <larsjuul@privat.dk> and
      Jette (Lyon) Juul <jettejuul@privat.dk>
[cjh] Fixed a problem with IE caching the bounce form.
[cjh] Fixed a typo in compose/javascript.inc that caused the address parsing
      javascript to add "@to_domain" in exactly the wrong cases.
[cjh] Removed a call to _() (gettext) that snuck in with the MIME rewrite.


-----------
v2.2.0-pre8
-----------

[cjh] Started weeding out unneccesary uses of imap_msgno() when the function
      in question takes the FT_UID flag.
[cjh] Vastly improved the MIME attachment code. IMP now passes the MIME
      torture test.
[cjh] Fixed a javascript problem in the compose window where the last
      character before a space would be deleted incorrectly.
[cjh] Using javascript to make sure that a target mailbox is selected before
      submitting a move/copy form.
[cjh] Committing patches from Federico Giannici <giannici@neomedia.it> for
      cookie-less operation.
[cjh] Doctored the clickable-url functions for performance, and to not
      butcher included html code.
[cjh] Moving ldap.php3 to ldap.php3.dist in the distribution.
[cjh] Patches from Stuart Henderson <sh@eclipse.net.uk> to: not include
      open_compose_win javascript when it isn't being used, clear possibly
      confusing behavior when mail is both from: and to: the current user,
      fix a javascript syntax error, some tweaks for ie3, and honoring of
      the new $this_client->rather_not_popup property.
[jon] Patches from Stuart Henderson <sh@eclipse.net.uk> that should fix
      errors when viewing non-existant messages via pop3.
[jon] Cleanups to local/en/contacts.help from <sh@eclipse.net.uk>.
[cjh] Localized the "Back to mailbox" text from templates/compose/results.inc
[cjh] Made the page navigator input size=2 for all locales
[cjh] Fixed up the language setting code to retain choices correctly.
      Choices are now set in a cookie and retained for a year, and are reset
      on login. You shouldn't lose your language selection anymore.


-----------
v2.2.0-pre7
-----------

[cjh] Improved pop3 support so that message deletion should work, and so
      that users are warned before permanently deleting a message.
[cjh] Made some interface to the contacts screen to make the UI clearer,
      hopefully.


-----------
v2.2.0-pre6
-----------

[cjh] Replaced all calls to ereg* functions with preg* functions, for speed.
      Because of this we now require php 3.0.12 or later.
[cjh] Fixed a problem where if there were no attachments selected and the
      user pressed the "delete attachments" button, the form would incorrectly
      be submitted and a variable would be used uninitialized.
[cjh] Putting an invalid value into the attachment field and clicking "add
      attachment" no longer causes an error.
[cjh] cancelling a message now waits for user confirmation before really
      throwing anything away.
[cjh] 8bit headers should now be correctly encoded according to RFC 2047

NLS: added missing spanish strings (cjh); committed updated
     Italian translation (from Federico Giannici <giannici@neomedia.it>)
     Updated Danish translations thanks to: Jette Lyon <jettelyon@mail.dk>
     Added Slovak locales thanks to: Peter Dordik <dordik@viapvt.sk>


-----------
v2.2.0-pre5
-----------

[IEM]  Fixed x-gtar mime type command line (z needs to come before f)
[IEM]  Added x-tar and x-debian-package mime support
[IEM]  Added better handleing of PGP/MIME types.
[IEM]  Fixed ldap support.  It was failing to load the ldap.php3 file properly
       from within contacts.php3.


-----------
v2.2.0-pre4
-----------

BUG: renaming folders should work again (cjh)
BUG: contacts with " in the fullname should work again
BUG: went back to using $h->udate for message dates to avoid problems with strange dates
BUG: fixed a garbled line that was causing a warning when resuming messages (cjh)
BUG: poppassd support should work now ("Charles P. Wright" <cpwright@cpwright.com>)
CHANGE: $default->localhost is now deprecated in favor of $SERVER_NAME
CHANGE: INBOX is no longer shown on the folders page
LANGUAGE: Czech updated
LANGUAGE: German updated
LANGUAGE: Polish now available (-_ sergio _- <ser@serek.arch.pwr.wroc.pl>)
LANGUAGE: Norwegian Bokmċl language support - Terje Lunndal <terje.lunndal@norway.eu.net>
LANGUAGE: Icelandic language support - Kristofer Arnar Einarsson <kristofe@kristofer.com>
LANGUAGE: French updated - Jean Charles Delepine <delepine@u-picardie.fr>
SECURITY: We should now be immune to the {} and mocha javascript exploits recently described on Bugtraq (Charles Wright).


------
v2.2.0-pre3
------
BUG: Fixed Nynorks-Norwegian (Roy-Magne Mo<rmo@www.hivolda.no>)
BUG: Fixed postgresql functions (iem)
BUG: Fixed several lynx issues (index, compose, menu, mailbox) (IEM)
BUG: large mailbox issues should be fixed now
BUG: from_server issues should be fixed (using from_server instead of localhost
BUG: Fixed a minor tabindex problem with server lists
BUG: attachments now work again
LANGUAGE: Estonian now available (Jaanus Toomsalu <jaanus@matti.ee>
LANGUAGE: Finnish now available (leo.jaaskelainen@kolumbus.fi)
LANGUAGE: Czech now available (Petr Cech) <cech@atrey.karlin.mff.cuni.cz>
CLEANUP: some IE3 html cleanup (stewart)
CLEANUP: cleaned up ldap code (use of imap_rfc822_write_address) (chuck)
CLEANUP: 100% magic quotes free
ADDED: sort order buttons (nice little arrors)
ADDED: several new ISpell language checking (danish, etc..)
ADDED: now prints a message telling you that a mailbox is empty (jon)
ADDED: documentation on per directory phplib configuration (prepend, etc..)
ADDED: empty mailbox message 
ADDED: better javascript error checking added to contacts form (chuck)
ADDED: Adding screen size changes
CHANGE: moved documentation into docs/ subdirectory to cleanup main tree
CHANGE: removed config/examples directory.  (using .dist files instead)
