Skip to content
Snippets Groups Projects
  1. Sep 30, 2013
  2. Sep 29, 2013
  3. Sep 27, 2013
  4. Sep 26, 2013
    • Jared Hancock's avatar
      Disable Kerberos and NTLM auth for mail fetch · 8b0085dd
      Jared Hancock authored
      On some configurations of PHP and remote mail servers, Kerberos and NTLM
      challenge response authentication could be possibly attempted. This is
      essentially futile and potentially fatal for osTicket mail fetching, as the
      system is currently designed for username and password authentication only.
      
      This patch disables challenge and response authentication for PHP versions
      5.3.2 and newer, which support the fix.
      
      This patch also consistently encodes mailbox names according to the rfc 2060
      for IMAP.
      8b0085dd
  5. Sep 24, 2013
  6. Sep 23, 2013
    • Peter Rotich's avatar
      Merge pull request #737 from greezybacon/issue/mailparse-attachments · 1cbc6f69
      Peter Rotich authored
      Detect attachments with Content-Type: ...; name=
      
      Reviewed-With: Jared Hancock <jared@osticket.com>
      1cbc6f69
    • Jared Hancock's avatar
      Detect attachments with Content-Type: ...; name= · be02c8d4
      Jared Hancock authored
      RFC2045, section 5.1 seems to indicate that arbitrary parameters can be
      appended to a Content-Type header specification. Some email clients seem to
      use the Content-Type header to specify an attachment without giving a
      separate Content-Disposition header normally used to signify attachments.
      
      This patch corrects attachment detection for piped emails to detect such
      emails. The patch also correctly decodes filenames specified either in the
      Content-Disposition or Content-Type headers using RFC5987, where the
      filename can be encoded using an arbitrary character set (ie, not us-ascii).
      be02c8d4
    • Peter Rotich's avatar
      Merge pull request #736 from greezybacon/issue/1.6-upgrade · 92eb45bb
      Peter Rotich authored
      
      Fix 1.6-* upgrade to 1.7.1
      
      Reviewed-By: default avatarPeter Rotich <peter@osticket.com>
      92eb45bb
    • Jared Hancock's avatar
      Fix 1.6-* upgrade to 1.7.1 · c3349266
      Jared Hancock authored
      8e72e521 (v1.7.1.2+) introduced a bug where
      osTicket version 1.6 would not send a cookie (by calling PHP
      session_start()) for the login page. Therefore, after unpacking the 1.7.1
      source code, an upgrade would not be possible, because a login would never
      be processed correctly.
      c3349266
  7. Sep 20, 2013
  8. Sep 18, 2013
  9. Sep 13, 2013
    • Jared Hancock's avatar
      Avoid double-encoding thread titles · bd680889
      Jared Hancock authored
      This is safe now, because the title is appropriately encoded in
      class.thread.php/ThreadEntry::create()
      
      Fixes #567, #718
      bd680889
    • Jared Hancock's avatar
      Fixes cookie domain specification · eecd0b1a
      Jared Hancock authored
      if the domain given in HTTP_HOST variable happens to have a port
      specification. Technically, the port specification should not be included in
      the domain spec given in the cookie.
      
      (And for the record, that makes no sense to me, seeing as a cookie would
      otherwise be valid for all servers on any ports at a particular domain).
      eecd0b1a
  10. Sep 12, 2013
    • Jared Hancock's avatar
      Fix up ROOT_PATH, yet again · c8197915
      Jared Hancock authored
      The previous implementation did not work correctly for symlinked folders.
      The new approach uses debug_backtrace() and ROOT_DIR to determine the
      difference between ROOT_DIR and the osTicket installation path.
      
      This thing is like a turd that won't flush
      c8197915
  11. Sep 11, 2013
Loading