David Goodwin
71402e9051
comment
2019-04-26 11:46:57 +01:00
David Goodwin
045a19ae33
re-format
2019-02-27 14:44:20 +00:00
David Goodwin
7ed57a0cda
assume the db updates work if no exception was thrown
2019-02-27 14:44:20 +00:00
David Goodwin
9024dddf46
move password_expiration code into the MailboxHandler.
2019-02-27 14:44:20 +00:00
David Goodwin
df99e66b2d
try and stop "A non-numeric value encountered in ..."; see #239
2019-02-27 14:44:20 +00:00
David Goodwin
28e687ff5b
sqlite does not support NOW(), use a string comparison
2019-02-18 21:11:17 +00:00
Christian Boltz
5bc85bec44
fix error message in Config::read_array(()
2019-01-28 00:48:05 +01:00
David Goodwin
570972944d
Merge remote-tracking branch 'origin/master' into feature-try-pdo
2019-01-08 13:38:38 +00:00
David Goodwin
5d47b85b9d
remove attribute that is in parent class
2019-01-08 13:22:44 +00:00
David Goodwin
020343999a
Merge pull request #221 from SuperVirus/fetchmail_different_source_port
...
Allow different port for fetchmail
2019-01-07 21:56:28 +00:00
David Goodwin
803e2342f8
fix psalm issues; reformat; rename new db functions
2019-01-06 21:32:58 +00:00
David Goodwin
1176c9ce78
reformat; fix some transition bugs
2019-01-06 21:32:58 +00:00
David Goodwin
ea33d9951a
try migrating to pdo
2019-01-06 21:32:58 +00:00
David Goodwin
d78fb1fbbd
move to Shell
2019-01-03 19:47:28 +00:00
David Goodwin
e5cacbec90
add missing attribute
2019-01-03 19:47:16 +00:00
David Goodwin
4fcdba9cf4
run php-cs-fixer (code reforamt)
2018-12-28 19:31:43 +00:00
David Goodwin
19cda31849
remove psalm warnings from code; fix password_expiry behaviour when enabled/disabled on MySQL
2018-12-28 19:27:33 +00:00
David Goodwin
74002bbf57
psalm fixes
2018-12-27 21:43:11 +00:00
David Goodwin
173d5775cd
psalm fixes
2018-12-27 13:55:02 +00:00
Christoph 'SuperVirus' Heitkamp
d35e66808b
Allow different port for fetchmail
2018-12-17 13:29:07 +01:00
David Goodwin
69e234f668
Merge pull request #200 from doktoil-makresh/master
...
Support for password expiration, managed in PostFix Admin
2018-11-27 09:14:36 +00:00
David Goodwin
afd418675c
pointless comment
2018-09-07 11:01:50 +01:00
David Goodwin
77d1b6c2e7
rename sql fields to just have mailbox.password_expiry and domain.password_expiry
2018-08-28 21:19:56 +01:00
Damien Martins
ce60b9fa59
Now password expiration is managed through Postfix Admin GUI
2018-08-20 15:32:53 +02:00
Damien Martins
e786609aa9
Adding support for password expiration. Please read README.password_expiration for more details
2018-08-17 16:07:14 +02:00
David Goodwin
76ee147375
phpdoc fix
2018-06-18 21:42:34 +01:00
David Goodwin
ec085b668b
missing class property
2018-06-18 21:34:24 +01:00
David Goodwin
9c0e1dd575
phpdoc fixes
2018-06-18 21:34:10 +01:00
David Goodwin
c44e82cc2d
phpdoc fix
2018-06-10 21:24:06 +01:00
David Goodwin
b48f99d4c6
reformat (phpcs)
2018-05-02 12:54:17 +01:00
David Goodwin
94f05bf9e4
switch to store $config internally within an array
2018-04-29 21:52:57 +01:00
Christian Boltz
24ad5cc3d8
Set $reset_by_sms even if password reset is disabled
...
... to avoid an "undefined variable" warning
2018-04-27 23:23:57 +02:00
Christian Boltz
3f1866d041
display phone number field only if $CONF[sms_send_function] is set
...
Without a way to send a SMS, asking users for their mobile number is
pointless.
2018-04-22 22:55:55 +02:00
Christian Boltz
cdf3c9acb9
initStruct(): use multiopt for 'id' 'dont_write_to_db'
...
This also means we can drop the 0 for not_in_db because this is the
default.
2018-04-22 20:09:38 +02:00
Christian Boltz
d2588a4de2
Fix phpcs whitespace breakage in initStruct etc.
2018-04-22 18:24:41 +02:00
Christian Boltz
12c4a4f29e
move shells/shell.php to model/Shell.php
...
... and drop a few lines in postfixadmin-cli.php that became superfluous
by this move (thanks autoloader!)
2018-03-25 21:44:42 +02:00
Christian Boltz
500c847fe0
re-add lost comment
2018-03-25 19:16:21 +02:00
Christian Boltz
91c07c9eae
VacationHandler: re-enable and fix code in validate_new_id()
...
Note that vacation.php doesn't use this function yet, so it's not
surprising that users didn't notice the broken code.
2018-03-25 15:22:51 +02:00
David Goodwin
4fb4d406ee
phpdoc; disable function init() - seems invalid
2018-03-16 20:07:52 +00:00
David Goodwin
fef2591335
phpdoc fixes
2018-03-16 20:07:21 +00:00
David Goodwin
cb34da4f46
phpcs reformat
2018-02-18 19:59:37 +00:00
David Goodwin
152975d05c
move to use db_assoc() rather than db_array() (code assumes assoc. array)
2018-02-10 21:08:35 +00:00
David Goodwin
5e1855632a
allow local aliases - see #134
2018-02-09 21:19:45 +00:00
Adrien Crivelli
15df6c1d7b
Reformat everything with PHP-Cs-Fixer
2018-01-26 23:54:37 +09:00
Christian Boltz
8fb67e6fbf
Fix broken table names caused by doubled table_by_key() calls
...
The high-level db_*() functions (like db_update(), and also
_db_add_field() in upgrade.php) call table_by_key() internally, which
also means the unwrangled table name needs to be handed over to them.
If handing over an already table_by_key()'d table name, it gets modified
again and results in something like prefix_prefix_mailbox.
2017-12-30 11:55:55 +01:00
houmingtao
5f1ac12d72
use current time as default token_validity value
2017-11-24 16:04:39 +08:00
root
4670182d79
fix invalid value for token_validity
2017-10-12 14:54:47 +08:00
Sylvain Tissot
ffb84283c2
Harden password reset process
...
The improvements are:
- Die with an explicit message when a user is trying to reset his lost password and the option is disabled in config
- Redirect user to main page after password change using relative URL
- Don't leak info whether user exists or has recovery info defined
- Throttle password reset requests to prevent brute force attacks
- Show phone/alt email fields in mailbox/admin edit form only when the password reset option is enabled
- Make database upgrade code compatible with other databases types
- Use the existing password generator to generate OTP. It is now stored in database, unique to each user, valid only for 1 hour and can only by used once.
2017-10-09 11:45:51 +09:00
Sylvain Tissot
9c9ba64a7f
Allows a user or admin to reset his/her forgotten password with a code sent by email/SMS #18
2017-08-21 13:05:25 +02:00
Christian Boltz
a366654757
Better use Config::Lang instead of global $PALANG
2017-06-25 14:35:27 +02:00
