Re: [SM-USERS] Header encoding/charset issue in 1.4.23-svn

2015-01-19 Thread Paul Lesniewski
> Header lines (e.g. From, Subject) that are encoded in a charset (test
> case: iso-8859-1) that is not SquirrelMail's $default_charset (here:
> utf-8) are not decoded correctly. The error message in the log is "PHP
> Warning:  htmlspecialchars(): Invalid multibyte sequence in argument in
> /home/webmail/src/squirrel/functions/strings.php on line 1512".
> SquirrelMail then does not display the corresponding header contents in
> the message list or the message display, rather "(unknown)".

There is a patch available for this (make sure to get version 2) here:

https://sourceforge.net/p/squirrelmail/bugs/2806

Please report any issues or success with it so I can commit it to our
repository!

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

--
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Re: [SM-USERS] AddressBook::full_address() should not be called statically ...

2015-01-19 Thread Paul Lesniewski
> [Mon Jan 12 17:31:00 2015] [error] [client 172.19.10.20] PHP Strict
> Standards:  Non-static method AddressBook::full_address() should not be
> called statically in
> /home/webmail/public_html/src/addrbook_search_html.php on line 129,
> referer:
> https://webmail.zedat.fu-berlin.de/src/compose.php?mailbox=3DINBOX&startM=
> essage=3D1
>
> Now I am not a real PHP programmer, but when I look at that method and
> the places where it is called, it seems like it can or even *should*
> actually be a static method, as it does not use $this at all.

I don't know if this method was originally designed to be called
externally, but you're right that it is fine being defined as static
and since it's being called statically from elsewhere, we should
declare it that way.  Change committed.  Thanks!

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

--
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Re: [SM-USERS] Show HTML Version by Default" -- any issues?

2015-01-19 Thread Paul Lesniewski
On 1/19/15, Juergen Nickelsen  wrote:
> On 17.01.2015 04:21, Paul Lesniewski wrote:
>> NOTE:  SourceForge is currently having problems with their mailing
>> lists.  This is a message originally from Juergen Nickelsen sent on
>> Thu, 20 Mar 2014 19:26:53 +0100
>
> [So, hopefully this messages makes it to the list now...]
>
>> Recently we had a complaint by one user that some of his messages
>> wouldn't display correctly in the interface as with, say, Gmail; it
>> turned out that they did when he enabled the "Show HTML Version by
>> Default" option.
> [...]
>> We are now thinking of enabling this option for all users; most may not
>> even know it exists, but will probably be happy with the change. Some
>> may complain about the change, but we hope to appease them with
>> instructions how to revert it.
>>
>> Are there any other issues to consider? I see that SquirrelMail does not
>> load external images by default, but that I can load them with a click,
>> which is the right thing to do, so no privacy issues here.
>>
>> Any other concerns?
>
> In between I can report that setting the "Show HTML Version by Default"
> option for all users has had no negative impact that we are aware of,
> and I think we had no complaints by users about messages not being
> displayed correctly.

In 1.4.23, I added a configuration setting called
$use_transparent_security_image which I think I defaulted to TRUE, but
you should check to see what you have it set to.  The legacy
SquirrelMail setting that showed many "this image has been removed for
security reasons" PNGs all over the page made rich text messages
nearly unreadable.

With that set to TRUE, I also default my systems to view as HTML.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!

--
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Re: [SM-USERS] Preference file *.tmp could not be opened

2015-01-19 Thread Paul Lesniewski
On 1/14/15, Krzs  wrote:
>
> Hi List,
> i can't login to my squirrelmail installation due to this error:
>
>> Preference file,
>> /var/local/squirrelmail/data/m...@maildomain.pref.tmp, could not be
>> opened. Contact your system administrator to resolve this issue.
>
> this file extension *.tmp doesn't exist, i show you the
> squirrelmail/data content and permissions:
>
>> ~ # ls -la /var/local/squirrelmail/data/ total 20K drwxr-sr-x 3
>> www-data www-data 4.0K Nov 21 01:52 . drwxr-sr-x 4 www-data
>> www-data 4.0K Nov 19 13:13 .. -rw--- 1 www-data www-data0
>> Nov 21 01:02 my@maildomain.abook drwx--S--T 2 www-data www-data
>> 4.0K Nov 21 01:46 my@maildomain.gnupg -rw-rw-rw- 1 www-data
>> www-data  604 Nov 21 01:52 m...@maildomain.pref -rw--- 1 www-data
>> www-data   36 Nov 21 00:41 .pref

Try not munging carriage returns.  Check the parent directories to
make sure they allow the web server to get to this directory.  Try to
remember what you changed.  If it was working before, you changed
permissions on something.  Maybe the web server runs under a different
username now.  Who knows

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

--
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Re: [SM-USERS] squirrelmail error message issue.

2015-01-19 Thread Paul Lesniewski
Please don't top-post and please quote your replies!  What a mess.

 i am using dovecot for pop3 and imap along with qmail toaster

 i had recently changed over from a 32 bit system to a 64 bit system.

 i use squirrelmail.

 the issue i face is that when the user inserts an invalid password then
 the
 message he gets is connection dropped by imap server  (instead of
 invalid
 userid or password)

 such a message confuses the user.

 my earlier 32 bit version used to give the correct message

 i am posting this issue here because i am not sure if this is
 squirrelmail
 issue or a dovecot issue.
>>>
>>> Probably a Dovecot issue.  The answer is in your logs.
>>>
>>>
>>> paul
>>>
>> thanks for your reply
>>
>> i intentionaly put the wrong password and checked the dovecot log and the
>> message i got was
>>
>> # tail -f /var/log/dovecot.log | grep "x...@yyy.com"
>> Nov 25 08:47:46 imap-login: Info: Aborted login (auth failed, 1 attempts
>> in
>> 2 secs): user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
>> secured, session=
>>
>> but in the squirrelmail login page instead of the message "unknown user
>> or
>> password incorrect" i get the message
>>
>> ERROR: Connection dropped by IMAP server.
>> Query: LOGOUT
>>
>>
>> in my old server where it is working correctly dovecot logs shows the
>> error
>>
>> Nov 25 14:46:12 imap-login: Info: Aborted login (auth failed, 1
>> attempts):
>> user=<"x...@yyy.com">, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
>>> and squirrelmail gives the error : "unknown user or password incorrect"
>> which is correct.
>>
>> is there any other place i need to check or some other config file
>> (either
>> squirrelmail or dovecot) that i need to modify
>>
>> could you kindly guide me
>
> At the command line:
>
> telnet localhost 143 (or whatever port your Dovecot server is listening on)
> A LOGIN x...@yyy.zzz w
> B LOGOUT
>
> See what the IMAP response is to line A.  It is probably not giving a
> valid response such as "NO login failed."  If it's giving a "BAD"
> response, you need to fix your Dovecot settings.
>
> squirrelmail version : Version: 1.4.22
>
> dovecot version : 2.2.7
>
> i followed your advice and here is the response from the server
>
> A LOGIN u...@xx.com 111
> A NO [AUTHENTICATIONFAILED] Authentication failed.
> B LOGOUT
> Connection closed by foreign host.
>
> dovecot log file shows as follows
>
> Jan 15 07:21:35 imap-login: Info: Aborted login (auth failed, 1 attempts in
> 14 secs): user=, method=PLAIN, rip=127.0.0.1,
> lip=127.0.0.1, secured, session=
>
> the error squirrelmail shows is : connection dropped by imap server. query
> logout.

Looks fine - standard Dovecot response.  I just tested here and
SquirrelMail reports the correct message to the user based on the same
response.  You'll have to dig around and see why your installation of
Dovecot is dropping when talking to SquirrelMail.  Maybe tcpdump or
ngrep will help you.  Make sure there's no proxy in the middle.

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

--
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Re: [SM-USERS] change_sqlpass plugin

2015-01-19 Thread Paul Lesniewski
> i am using qmailtoaster 64 bit
>
> vpopmail, centos 6 64 bit
> mysql database
>
> vpopmail has every domain as a seperate table example

That's weird.  What's the use?

> if my domain name is : x.com then the table is
> x_com
>
> i edited the config.php of the change_sqlpass plugin as advised here
> https://forums.gentoo.org/viewtopic-t-410886-start-0.html
>
> but i am getting error as such (i enabled debup in the change_sqlpass plugin
> )
>
> DATABASE ERROR: could not lookup salt: SELECT SUBSTRING(pw_passwd,4,9) FROM
> vpopmail WHERE pw_name = "hosting"  DB Error: no such table
>
> it seems that the change_sqlpass expects all the userids to be stored in a
> single table instead of seperate tables per domain

No, it expects you to give it a query that works.  Make sure your
query fits your schema.  Use the mysql command line client to test if
you're not sure.  End of story.

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

--
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Re: [SM-USERS] change_sqlpass for qmailtoaster

2015-01-19 Thread Paul Lesniewski
On 1/14/15, Rajesh M <24x7ser...@24x7server.net> wrote:
> hi
>
> i was able to adapt the change_sqlpass plugin to suit vpopmail mysql
> database of qmailtoaster wherein the domains are created as domain_com.
>
> however i got stuck at one specific point
>
> as per the details in the config file the variable : %3 returns the domain
> name as : domainname.com
>
> how do i get domainname.com within a variable so that i can replace dot with
> underscore ie domainname.com with domainname_com

https://dev.mysql.com/doc/refman/5.5/en/string-functions.html#function_replace

You should use this in your FROM clauses also if you intend to serve
users on more than one domain.

> for example i tried to use : $domainname = %3; but php throws a blank page.

http://www.squirrelmail.org/docs/admin/admin-11.html#ss11.1


-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

--
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Re: [SM-USERS] Undefined index errors in 1.4.23-SVN

2015-01-19 Thread Paul Lesniewski
On 1/18/15, Alex Regan  wrote:
> Hi,
>
> I'm using squirrelmail-1.4.23-SVN stable on fedora20 and I'm noticing
> from the error_log the following errors that keep repeating pretty
> frequently:
>
> [Fri Jan 16 17:20:49.130822 2015] [:error] [pid 8752] [client
> 69.144.179.61:52531] PHP Notice:  Undefined index: ID in
> /usr/share/squirrelmail/functions/mailbox_display.php on line 207,
> referer:
> https://mail.example.com/webmail/src/right_main.php?mailbox=INBOX&sort=0&startMessage=1
>
> This repeats for ID, SUBJECT, RECEIVED_DATE_STRING, and TYPE0.
>
> It looks like this might be the result of some type of unauthorized
> access attempt?

Why?  Do you have access logs corresponding to these requests?

> There are also entries like the following, which I'm not sure whether
> they are related:
>
> [Fri Jan 16 20:29:53.874099 2015] [:error] [pid 12039] [client
> 173.196.192.34:50709] PHP Notice:  Uninitialized string offset: 47 in
> /usr/share/squirrelmail/class/mime/Rfc822Header.class.php on line 184,
> referer: https://mail.example.com/webmail/src/right_main.php
>
> How can I troubleshoot these further? These warnings don't seem to be
> impacting functionality, but I'd sure like to get them fixed.

Look at access logs.  Watch error log when using SquirrelMail; see if
you can reproduce in your own usage.

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

--
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users