New Version 2.3.2
Bugfix: When using IMAP folders in a subdirectory, "Move mail to" always showed
INBOX selected and not the name of the actual folder.
New Version 2.3.1
Security update: send_mail.php now uses the move_uploaded_file() function
instead of copy(). On some systems a vulnerability might have made it
possible for a user to attach system files of the machine running PHPwebmail.
Thanks for the hint to Nasir Simbolon.
New Version 2.3
Jan C. Wynholds had the good idea to show only a limited number of messages in the message pane. He sent me the code and I implemented his ideas.
UPGRADES, check webmail.sql for the new field "nummsgs" in the prefs table.
New Version 2.2
Mirko Holler made the following additions:
Patch in mime.php to mark sent messages in IMAP folders "read".
Minor change to the From header for mail relaying. See README.
Some minor code clean up and bug fixes with $sql_host and the local tmp directory.
Fixed logout.php, which caused a "could not display page" error in Internet Explorer when PHPwebmail is running on a PHP 4.1 server.
Important security information
This week a security flaw in PHP up to version 4.0.3 was discovered. Forms that use file upload capablities can be used to crack the server.
PHPwebmail uses file uploads to send attachments.
I would not rate the security risk for PHPwebmail very high, since only users with an account can log on to the system and send mail.
Please update your PHP4 version or disable the upload functions in the source of send_mail.php if you have a large or otherwise uncontrolled user base on your server.
mail.inc renamed to mail.inc.php
Before one could read the mail.inc file in the webbrowser and see the
MySQL login information.
Update 2.1l is out
For low bandwith connections, the user can now switch to a text only version
of PHPwebmail via the preferences.
In the setup file (mail.inc) the administrator can now also set the color
for links to make "textmode" a little more colorful.
An open, cross-platform journaling program.
A scientific plotting package.