Froxlor

Ajax

fix wrong request-parameter reading for table-column mangement

2023-02-17 19:32:27 +01:00

Api

use Request-wrapper-class for every access to $_POST superglobal

2024-05-09 15:48:23 +02:00

Bulk

various minor bugfixes; composer requirements update

2022-08-10 00:17:11 +02:00

Cli

use Request-wrapper-class for every access to $_POST superglobal

2024-05-09 15:48:23 +02:00

Config

Ensure XPath for ConfigDaemon matches exactly one element (#1224 )

2024-01-13 12:31:15 +01:00

Cron

use Request-wrapper-class for every access to $_POST superglobal

2024-05-09 15:48:23 +02:00

Customer

implementation start of rspam/antispam feature

2024-01-05 15:37:04 +01:00

Database

use default caching_sha2_password auth plugin for mysql8

2024-05-03 09:02:22 +02:00

Dns

Ensure that DMARC entries are generated as subdomain, Allow overwriting of DMARC and SPF subdomain records (#1237 )

2024-02-09 08:11:41 +01:00

Domain

don't output ipv6 in brackets for system.ipaddress setting as the brackets will be added to the value resulting in an invalid mysql-access-host; fixes #1215

2024-01-01 17:04:02 +01:00

Http

fix ratelimiting when settings do not exist (yet)

2023-05-06 22:00:19 +02:00

Idna

replace deprecated function utf8_encode (#1198 )

2023-11-08 10:27:04 +01:00

Install

add compatibility for mariadb-dump executable instead of mysqldump

2024-04-27 10:22:42 +02:00

Settings

use Request-wrapper-class for every access to $_POST superglobal

2024-05-09 15:48:23 +02:00

System

add delete-userfiles flag for Domain.delete() to remove email-account data on the filesystem (if any); fixes #1239

2024-04-28 13:49:07 +02:00

Traffic

fix regression bug in 'incorrect top-5 customers' sorting in traffic-overview which leads to incorrect customer-links due to wrong indexing in the array; fixes #1236

2024-02-04 19:54:19 +01:00

UI

never allow {{ }} in user-input

2024-05-10 17:23:25 +02:00

Validate

use Request-wrapper-class for every access to $_POST superglobal

2024-05-09 15:48:23 +02:00

CurrentUser.php

fix 2fa code verification if method==email for changing system-critical settings

2023-11-08 10:47:12 +01:00

ErrorBag.php

implementation start of rspam/antispam feature

2024-01-05 15:37:04 +01:00

FileDir.php

correctly validate if a symlink is within the customers home-directory if it's not an absolute path; fixes #1242

2024-03-08 09:23:21 +01:00

Froxlor.php

initial integration of let's encrypt renew-hook for froxlor-vhost; refs #1186

2024-01-13 11:12:48 +01:00

FroxlorLogger.php

Merge pull request from GHSA-x525-54hf-xr53

2024-05-03 07:54:13 +02:00

FroxlorTwoFactorAuth.php

major refactoring of almost all files

2022-04-28 20:48:00 +02:00

index.html

add empty index.html file to all folders to avoid accidental folder-content disclosure if 'Options Indexes' is set for a (parent)folder containing froxlor in webserver-config

2022-03-24 14:35:30 +01:00

Language.php

add interval for external update-check; add parameter 'force' to Froxlor.checkUpdate() API call; fix session/language update when changing language

2022-07-24 11:47:10 +02:00

MailLogParser.php

corrected mail-log parsing, refs #1119

2023-03-27 12:53:21 +02:00

PhpHelper.php

use Request-wrapper-class for every access to $_POST superglobal

2024-05-09 15:48:23 +02:00

Settings.php

backup rspamd configs in config-templates; add 'antispam' to valid_keys for config-json file; test existence of file in config-backup-function

2024-01-05 16:52:40 +01:00

SImExporter.php

use absolute path in settings-export to avoid errors when invoking the cli scripts from out of froxlor's homedir

2023-10-24 19:00:09 +02:00

User.php

fix user details in form fields

2022-12-25 20:42:34 +01:00