January 10th, 2012· Fix bug in handling of base href and inline content (#1488290)
· Fix SQL Error when saving a contact with many email addresses (#1488286)
· Fix strict email address searching if contact has more than one address
· Remove duplicated 'organization' label (#1488287)
· Fix so editor selector is hidden when 'htmleditor' is listed in 'dont_override'
· Fix wrong (long) label usage (#1488283)
· Fix handling of INBOX's subfolders in special folders config (#1488279)
· Add ifModule statement for setting Options -Indexes in .htaccess file (#1488274)
· Fix searching on IMAP servers without CHARSET specifier support (#1488271)
· Fix crash with eAccelerator (#1488256)
· Fix expanding folders during drag&drop (#1488260)
· Fix wrong postgres sequence name in upgrade from 0.6
· Fix broken CREATE INDEX queries in SQLite DDL files (#1488255)
December 14th, 2011· Make Roundcube render the Email Standards Project Acid Test correctly
· Replace prompt() with jQuery UI dialog (#1485135)
· Fix navigation in messages search results
· Improved handling of some malformed values encoded with quoted-printable (#1488232)
· Add possibility to do LDAP bind before searching for bind DN
· Fix handling of empty tags in HTML messages (#1488225)
· Add content filter for embedded attachments to protect from XSS on IE (#1487895)
· Use strpos() instead of strstr() when possible (#1488211)
· Fix handling HTML entities when converting HTML to text (#1488212)
· Fix fit_string_to_size() renders browser and ui unresponsive (#1488207)
· Fix handling of invalid characters in request (#1488124)
· Fix merging some configuration options in update.sh script (#1485864)
· Fix so TEXT key will remove all HEADER keys in IMAP SEARCH (#1488208)
· Fix handling contact photo url with https:// prefix (#1488202)
· Fix possible infinite redirect on attachment preview (#1488199)
· Improved clickjacking protection for browsers which don't support X-Frame-Options headers
· Fixed bug where similiar folder names were highlighted wrong (#1487860)
· Fixed bug in handling link with '!' character in it (#1488195)
· Fixed bug where session ID's length was limited to 40 characters (#1488196)
· TinyMCE security issue: removed moxieplayer (embedding flv and mp4 is not supported anymore)
September 30th, 2011A full-featured address book with rich contact information:
· The address book UI was finally extended to store rich contact data including photos. We worked hard to create a flexible and intuitive UI to enter and manage the contact data. Along with that, import and export of vcards was improved to support all the new fields. If you have LDAP directories configured as address sources, you might review the configuration and map the new contact fields to the according LDAP attributes using the 'fieldmap' property.
Group support for LDAP address books:
· While speaking of LDAP, the LDAP wrapper of Roundcube now also supports address groups thanks to the contribution of Andreas Dick. This requires some additional configuration which is described in the comments of config/main.inc.php.dist
ACL rights/namespace management plugin:
· The new package includes a plugin which extends the folder manager to manage Access Control Lists according to RFC4314 and RFC2086. This allows one to share folders with other users if the IMAP server supports ACL. If there's a LDAP directory configured, the ACL manager even does auto-completion when adding a new user.
memcache support for session storage:
· As an alternative to the SQL-based storage of user sessions, Roundcube 0.6 is now capable of using memcache for fast and redundant storage of session data. Set 'session_storage' and 'memcache_hosts' config options to enable it.
File uploads with progress display:
· Using the features of the APC module, Roundcube can now display the progress of file uploads. This has to be enabled in config using the 'upload_progress' option. Make sure APC is available in PHP and that apc.rfc1867 is set in php.ini
Automated update process with database schema check:
· Upgrading Roundcube installations has become an easy task with the new update shell script. Unpack the new package in some directory and then run bin/installto.sh from there. TARGETDIR is the location of the Roundcube installation which you want to upgrade. The script then copies all files to the target directory and does all modifications necessary to get the database and config files up-to-date.
Exchange logo by config:
· And last but not least, one can now set a customized logo by config without the necessity to create a new skin. We'd like to encourage all hosting providers to set the 'skin_logo' config option with an URL to their logo. This will hopefully clarify to your users, what service they're actually using. We registered an increased amount of support requests from users who don't understand that Roundcube is not a public service but that they have to contact their ISP for help.
April 21st, 2011· TinyMCE 3.4.2 now compatible with IE9
· PEAR::Net_SMTP 1.5.2, fixed timeout issue (#1487843)
· Fix bug where template name without plugin prefix was used in render_page hook
· Support 'abort' and 'result' response in 'preferences_save' hook, add error handling
· Fix bug where some content would cause hang on html2text conversion (#1487863)
· Improve space-stuffing handling in format=flowed messages (#1487861)
· Fix bug where some dates would produce SQL error in MySQL (#1487856)
· Added workaround for some IMAP server with broken STATUS response (#1487859)
· Fix bug where default_charset was not used for text messages (#1487836)
· Stateless request tokens. No keep-alive necessary on login page (#1487829)
· Force names of unique constraints in PostgreSQL DDL
· Add code for prevention from IMAP connection hangs when server closes socket unexpectedly
· Remove redundant DELETE query (for old session deletion) on login
· Get around unreliable rand() and mt_rand() in session ID generation (#1486281)
· Fix some emails are not shown using Cyrus IMAP (#1487820)
· Fix handling of mime-encoded words with non-integral number of octets in a word (#1487801)
· Fix parsing links with non-printable characters inside (#1487805)
· Fixed de_CH/de_DE localization bugs (#1487773)
· Add variable for 'Today' label in date_today option (#1486120)
· Applied plugin changes since 0.5-stable release
· Fix SQL query in rcube_user::query() so it uses index on MySQL again
· Use only one from IMAP authentication methods to prevent login delays (1487784)
· Fix strftime format support in date_today option
· Removed redundant tags from contact add/edit pages
· Fix CSS error in contact details screen on IE7 (#1487775)
February 15th, 2011· Use IMAP's ID extension (RFC2971) to print more info into debug log
· Security: add optional referer check to prevent CSRF in GET requests
· Fix email_dns_check setting not used for identities/contacts (#1487740)
· Fix ICANN example addresses doesn't validate (#1487742)
· Security: protect login form submission from CSRF
· Security: prevent from relaying malicious requests through modcss.inc
· Fix handling of non-image attachments in multipart/related messages (#1487750)
· Fix IDNA support when IDN/INTL modules are in use (#1487742)
· Fix handling of invalid HTML comments in messages (#1487759)
· Fix parsing FETCH response for very long headers (#1487753)
· Fix add/remove columns in message list when message_sort_order isn't set (#1487751)
· Check mime headers before attempt to parse them (#1487745)
· Quote header values in show_additional_headers plugin (#1487744)
· Fix settings UI on IE 6 (#1487724)
· Remove double borders in folder listing (#1487713)
· Separate full message headers UI element from headers table (#1487715)
· Add part MIME ID to message_part_* hooks (#1487718)
· Improve parsing of MS Outlook vCards (#1487716)
· Updated PEAR::Net_Socket to 1.0.10
· Updated PEAR::Net_IDNA2 to 0.1.1
· Fix handling of comments inside an email address spec. (#1487673)
· Show full mail subject as title when hovering a cut subject link (#1487128)
· Fix randomly disappearing folders list in IE (#1487704)
· Fix list column add/removal in IE (#1487703)
· Fix login redirect issues (#1487686)
· Require PHP 5.2.1 or greater
· Fix %h/%z variables in username_domain option (#1487701)
· Workaround for setting charset in case of malformed bodystructure response (#1487700)
· Fix impossible to subscribe to protected folders (#1487656)
· Fix setting timezone in Preferences (#1487705)
January 19th, 2011· Fix double-login/session issue (#1487104)
· Wrap HTML parts with and add Doctype declaration (#1487098)
· Make rcube_autoload silently skip unknown classes (#1487109)
· Fix charset detection in vcards with encoded values (#1485542)
· Better CSS cursors for splitters (#1486874)
· Show the same message only once (#1487641)
· Fix namespaces handling (#1487649)
· Add handling of multifolder METADATA/ANNOTATION responses
· Fix handling of INBOX when personal namespace prefix is non-empty (#1487657)
· Fix handling square brackets in links (#1487672)
· Add description of 'use_https' option in main.inc.php.dist file
August 17th, 2010· Fix disapearing upload form disapears when user selects a file on Safari (#1486823)
· Don't replace error messages with loading info (#1486300)
· Fix JS errors on compose mode switch (#1486870)
· Fix message structure parsing when it lacks optional fields (#1486881)
· Include all recipients in sendmail log
· Support HTTP_X_FORWARDED_PROTO header for HTTPS detecting (#1486866)
· Fix default IMAP port configuration (#1486864)
· Create Sent folder when starting to compose a new message (#1486802)
· Fix handling of messages with Content-Type: application/* and no filename (#1484050)
· Improved compose screen: resizable body and attachments list, vertical splitter, options menu
· Fix RC forgets search results (#1483883)
· TinyMCE 3.3.7
· Improve parsing of styled empty tags in HTML messages (#1486812)
· Add variable support in base_dn/bind_dn config (#1486779)
· Add button to hide/unhide the preview pane (#1484215)
· Fix no-cache headers on https to prevent content caching by proxies (#1486798)
· Fix attachment filenames broken with TNEF decoder using long filenames (#1486795)
· Use user's timezone in Date header, not server's timezone (#1486119)
· Add option to set separate footer for HTML messages (#1486660)
· Add real SMTP error description to displayed error messages (#1485927)
· Fix some IMAP errors handling when opening the message (#1485443)
· Fix related parts aren't displayed when got mimetype other than image/* (#1486432)
· Multiple identity and database support for squirrelmail_usercopy plugin (#1486517)
· Support dynamic hostname (%d/%n) variables in configuration options (#1485438)
· Add 'messages_list' hook (#1486266)
· Add request* event triggers in http_post/http_request (#1486054)
· Fix use RFC-compliant line-delimiter when saving messages on IMAP (#1486712)
· Add 'imap_timeout' option (#1486760)
· Fix forwarding of messages with winmail attachments
· Fix handling of uuencoded attachments in message body (#1485839)
· Added list_mailboxes hook in rcube_imap::list_unsubscribed() (#1486668)
· Fix wrong message on file upload error (#1486725)
· Add support for data URI scheme [RFC2397] (#1486740)
· Added 'actionbefore', 'actionafter', 'responsebefore', 'responseafter' events
· Fix double-addition of e-mail domain to content ID in HTML images
· Read and send messages with format=flowed (#1484370), fixes word wrapping issues (#1486543)
· Fix duplicated attachments when forwarding a message (#1486487)
· Fix message/rfc822 attachments containing only attachments are not parsed properly (#1486743)
· Fix character in winmail.dat attachments names (#1486738)
· Fix handling errors of folder deletion (#1486705)
· Parse untagged CAPABILITY response for LOGIN command (#1486742)
· Renamed all php-cli scripts to use .sh extension
· Some files from /bin + spellchecking actions moved to the new 'utils' task
· Added thread tree icons
· Extend contact groups support (#1486682)
· Fix check-recent action issues and performance (#1486526)
· Fix messages order after checking for recent (#1484664)
· Fix autocomplete shows entries without email (#1486452)
· Fix listupdate event doesn't trigger on search response (#1486708)
· Fix select_all_mode value after selecting a message (#1486720)
· Set focus to editor on reply in HTML mode (#1486632)
· Fix composing in HTML jumps cursor to body instead of recipients (#1486674)
· Allow columns order change per user - drag&drop (#1485795)
· Add References header in read receipt (#1486681)
· Fix database constraint violation when opening a message (#1486696)
· Add 'loading' message while login is in progress (#1486667)
· Fix quota_zero_as_unlimited (#1486662)
· Fix folder subscription checking (#1486684)
· Fix INBOX appears (sometimes) twice in mailbox list (#1486672)
· Fix listing of attachments of some types e.g. "x-epoc/x-sisx-app" (#1486653)
· Fix DB Schema checking when some db_table_* options are not set (#1486654)
May 18th, 2009· Using jQuery for client scripting
· Implemented Plugin API (#1326399)
· Moved some core functionality (temp file storage) into plugins
· Fix Answered/Forwarded flag setting for messages in subfolders
· Fix autocomplete problem with capital letters (#1485792)
· Support UUencode content encoding (#1485839)
· Minimize chance of race condition in session handling (#1485659, #1484678)
· Fix session handling on non-session SQL query error (#1485734)
· Fix html editor mode setting when reopening draft message (#1485834)
· Added quick search box menu (#1484304)
· Fix wrong column sort order icons (#1485823)
· Updated TinyMCE to 3.2.3 version
· Fix attachment names encoding when charset isn't specified in attachment part (#1484969)
· Fix message normal priority problem (#1485820)
· Fix autocomplete spinning wheel does not disappear (#1485804)
· Added log_date_format option (#1485709)
· Fix text wrapping in HTML editor after switching from plain text to HTML (#1485521)
· Fix auto-complete function hangs with plus sign (#1485815)
· Fix AJAX requests errors handler (#1485000)
· Fix read/write database recognition (#1485811)
· Added possibility to encrypt received header, option 'http_received_header_encrypt', added some more logic in encrypt/decrypt functions for security
May 18th, 2009· Fix quicksearchbox look in Chrome and Konqueror (#1484841)
· Fix UTF-8 byte-order mark removing (#1485514)
· Fix folders subscribtions on Konqueror (#1484841)
· Fix debug console on Konqueror and Safari
· Fix messagelist focus issue when modifying status of selected messages (#1485807)
· Support STARTTLS in IMAP connection (#1485284)
· Fix DEL key problem in search boxes (#1485528)
· Support several e-mail addresses per user from virtuser_file (#1485678)
· Fix drag&drop with scrolling on IE (#1485786)
· Fix adding signature separator in html mode (#1485350)
· Fix opening attachment marks message as read (#1485803)
· Fix 'temp_dir' does not support relative path under Windows (#1484529)
· Fix "Initialize Database" button missing from installer (#1485802)
· Fix compose window doesn't fit 1024x768 window (#1485396)
· Fix service not available error when pressing back from compose dialog (#1485552)
· Fix using mail() on Windows (#1485779)
· Fix word wrapping in message-part's < PRE >s for printing (#1485787)
· Fix incorrect word wrapping in outgoing plaintext multibyte messages (#1485714)
· Fix double footer in HTML message with embedded images
· Fix TNEF implementation bug (#1485773)
· Fix incorrect row id parsing for LDAP contacts list (#1485784)
· Fix 'mode' parameter in sqlite DSN (#1485772)
March 10th, 2009· Use US-ASCII as failover when Unicode searching fails (#1485762)
· Fix errors handling in IMAP command continuations (#1485762)
· Fix FETCH result parsing for servers returning flags at the end of result (#1485763)
· Fix datetime columns defaults in mysql's DDL (#1485641)
· Fix attaching more than nine inline images (#1485759)
· Support 'UNICODE-1-1-UTF-7' alias for UTF-7 encoding (#1485758)
· Fix mime-type detection using a hard-coded map (#1485311)
· Don't return empty string if charset conversion failed (#1485757)
· Disable concurrent autocomplete query results display (#1485743)
· Fix new lines stripped from message footer (#1485751)
· Fix IE problem with mouse click autocomplete (#1485739)
· Fix html body washing on reply/forward + fix attachments handling (#1485676)
· Fix multiple recipients input parsing (#1485733)
· Fix replying to message with html attachment (#1485676)
· Use default_charset for messages without specified charset (#1485661, #1484961)
· Support non-standard "GMT-XXXX" literal in date header (#1485729)
· Added TNEF support to decode MS Outlook attachments (winmail.dat)
· Fix "value continuation" MIME headers by adding required semicolon (#1485727)
· Fix pressing select all/unread multiple times (#1485723)
· Fix selecting all unread does not honor new messages (#1485724)
· Fix some base64 encoded attachments handling (#1485725)
· Support NGINX as IMAP backend: better BAD response handling (#1485720)
· Performance fix: don't fetch attachment parts headers twice to parse filename
· Fix checking for recent messages on various IMAP servers (#1485702)
· Performance fix: Don't fetch quota and recent messages in "message view" mode
· Fix displaying of alternative-inside-alternative messages (#1485713)
· Fix MDNSent flag checking, use arbitrary keywords (asterisk) flag (#1485706)
· Fix creation of folders with '&' sign in name
· Fix parsing of email addresses without angle brackets (#1485693)
· Save spellcheck corrections when switching from plain to html editor (and spellchecking is on)
· Fix large search results on server without SORT capability (#1485668)
· Get rid of preg_replace() with eval modifier and create_function usage (#1485686)
· Bring back < base > and < link > tags in HTML messages
· Fix XSS vulnerability through background attributes as reported by Julien Cayssol
· Fix problems with backslash as IMAP hierarchy delimiter (#1484467)
· Secure vcard export by getting rid of preg's 'e' modifier use (#1485689)
· Fix authentication when submitting form with existing session (#1485679)
· Allow absolute URLs to images in HTML messages/sigs (#1485666)
· Fix message body which contains both inline attachments and emotions
· Fix SQL query execution errors handling in rcube_mdb2 class (#1485509)
· Fix address names with '@' sign handling (#1485654)
· Improve messages display performance
· Fix messages searching with 'to:' modifier
December 31st, 2008· Major bugfixes.
September 22nd, 2008· Major bugfixes.