1
0
mirror of https://github.com/postfixadmin/postfixadmin.git synced 2026-10-24 12:19:19 +03:00
Commit Graph

3414 Commits

Author SHA1 Message Date
kent
85d782709c Include php82 in release archive name per review v4.0.2-test 2026-04-01 14:22:31 +00:00
kent
901f532242 Remove extensions from release workflow - only needed for tests, not packaging 2026-03-31 20:34:30 +00:00
kent
7b0facf810 Fix exclude patterns per review: .php-cs-fixer* glob, add debian/ 2026-03-31 19:02:55 +00:00
kent
922a473e88 Add GitHub Actions workflow to build self-contained release archives (#973)
Automatically builds a .tar.gz with vendor/ included when a release
is published, so admins can install without needing composer.
2026-03-31 10:12:07 +00:00
David Goodwin
7dc14406f7 remove phpVersion attribute from psalm which caused it to fail to see newer style PHP code and incorrectly error 2026-03-31 06:18:55 +01:00
Kent Riboe
ae96481c99 Remove old Bootstrap 3 remnants (dark-theme.css, col-sm-offset in setup.php) (#1002) 2026-03-31 06:17:54 +01:00
David Goodwin
489c9aacb6 fix xmlrpc.php -> setAway - parameter types changed after this file was deleted 2026-03-29 11:56:33 +01:00
David Goodwin
1223197a7e formatting... 2026-03-29 11:48:05 +01:00
wvolz
c4a276f26d Disable totp and app password pages based on settings (#996)
- Redirect to main.php if totp ($CONF['totp']) or app password page ($CONF['app_passwords']) is accessed and the config is disabled.
2026-03-27 09:34:18 +00:00
wvolz
874d01b10b hide app_passwords menu items if disabled in config (#995) 2026-03-26 09:30:02 +00:00
David Goodwin
522ba1a772 add back xmlrpc.php - it seems it is in use - see #993 2026-03-24 14:06:08 +00:00
David Goodwin
57378ee157 see #992 - try and remove bash-ism from postfixadmin-cli wrapper; manual merge of provided patch 2026-03-24 12:24:21 +00:00
David Goodwin
29a7c846f1 see #989 - allow newer version of spomky-labs/otphp, which removes some unnecessary dependencies and silences some PHP 8.4 warnings 2026-03-11 09:27:03 +00:00
David Goodwin
2ede2c8726 comments 2026-03-11 09:13:38 +00:00
David Goodwin
8a1f9a11af CSRF protection - support multiple tokens (#985)
possible fix for https://github.com/postfixadmin/postfixadmin/issues/967

CSRF Token changes : rather than have one PFA_Token value in $_SESSION, store a list of them, where each value has a time stamp it was issued on. The aim is to allow the user to have multiple browser tabs open at once - and not have the last tab that loaded trample on others. Tokens expire after 1 hour.

Adds a Smarty helper function `{CSRF_Token}` which will output `<input type=hidden name=CSRF_Token value=asdf123>` or `{CSRF_Token type=url}` which outputs a literal string like 'asdf123' suitable for placing in a URL.

Adds a PHP exception handler in public/common.php, which could be used to display a more friendly error message/response (but at the moment is fairly minimal).

Removes most uses of `die()` within the codebase, and instead moves to throw an exception
2026-03-01 19:30:16 +00:00
David Goodwin
7714aa47a3 always show the mailbox header in the list-virtual page, add title to domain aliases 2026-02-28 20:12:57 +00:00
David Goodwin
d2de9bd896 fix csrf tag 2026-02-28 19:21:40 +00:00
David Goodwin
878d5ab3ef move dark mode toggle to the footer, remove {strip}, fix tag mismatch in menu etc 2026-02-28 19:16:42 +00:00
David Goodwin
a53520ed35 main.tpl : translate some of the global search things 2026-02-28 19:15:45 +00:00
David Goodwin
5116a19046 add token padding to login form to perhaps make it look better 2026-02-28 19:15:19 +00:00
David Goodwin
80379c60c2 list.tpl - make table striped, add token padding, have only one <thead> section in a table 2026-02-28 19:12:30 +00:00
David Goodwin
18d13c2b1d fix mismatching </div> tags in list.tpl so it can be nicely indented again 2026-02-28 19:11:51 +00:00
David Goodwin
ef2513bdd8 list-virtual_mailbox.tpl - make list-virtual_mailbox.tpl self contained / well formed, remove opening table tag from list-virtual.tpl etc. 2026-02-28 19:10:09 +00:00
David Goodwin
e5ab0a2ebf editform -> make form field errors more obvious 2026-02-28 19:09:30 +00:00
David Goodwin
0928bea759 collapse header.tpl and footer.tpl into index.tpl 2026-02-28 19:08:42 +00:00
David Goodwin
b4b0f86df0 fix namespace issue (model\Languages etc) 2026-02-28 19:07:00 +00:00
David Goodwin
0e3aa33207 fix test (removal of invalid namespace) 2026-02-28 16:45:34 +00:00
David Goodwin
906cd6c50c put light mode/dark mode toggle in the footer 2026-02-28 16:42:55 +00:00
David Goodwin
6004d482f3 drop unnecessary css 2026-02-28 16:42:44 +00:00
David Goodwin
d445dac916 fix sql in clause so global search works again 2026-02-28 16:42:25 +00:00
David Goodwin
cb91ae64f2 formatting 2026-02-28 16:41:45 +00:00
Copilot
3bdc282289 Upgrade to Bootstrap 5.3.0, add lightmode/darkmode switch, drop datepicker js (use html5 datetime-local) (#987)
* Upgrade to Bootstrap 5.3.0 with Bootstrap Icons
* token improvements to setup.php rendering 
* improve backup page rendering
* move to use html5 datetime-local field for vacation from/to rather than the previous js version
* remove datetimepicker js and bootstrap js and jquery (no longer needed)
* vacation: we load any previous dates in from the database, these could include ancient dates, so default them to now and now+1 if they are before today
* drop bootstrap 3.4.1 css
* bootstrap - add light mode / dark mode switch - taken from https://github.com/404GamerNotFound/bootstrap-5.3-dark-mode-light-mode-switch
2026-02-28 10:17:56 +00:00
Fredrik Boström
902739f96d WIP: TOTP reset for lost secrets (#988)
add TOTP reset for lost secrets - see #924
2026-02-28 10:15:07 +00:00
David Goodwin
730e5fa3f0 docs: update README.md with better PHP version requirements 2026-02-15 11:25:25 +00:00
David Goodwin
ce03433b52 Merge pull request #957 from postfixadmin/psalm-fixes
Upgrade PHP / libraries / general refactoring

see https://github.com/postfixadmin/postfixadmin/pull/957
2026-02-11 20:53:07 +00:00
David Goodwin
12818f398e try and improve docs around $CONF["dovecotpw"] in config.inc.php (see #398) 2026-02-04 20:54:52 +00:00
David Goodwin
de0eec58af make install.sh cope with not all db extensions from require-dev being present - see #965 2026-01-30 07:38:08 +00:00
David Goodwin
929ca8ba9b feat: improve install.sh - try and check for PHP PDO extensions and warn if none found, see #965 2026-01-30 07:35:18 +00:00
David Goodwin
0ecc961eb3 make psalm happy 2026-01-29 13:46:21 +00:00
David Goodwin
8d67fb4bdd formatting 2026-01-29 13:42:34 +00:00
David Goodwin
ba404a56f7 remove E_USER_ERROR which makes no sense here really 2026-01-29 13:42:17 +00:00
David Goodwin
0216259af3 main.php: use db_in_clause() instead (thanks @copilot) 2026-01-29 13:41:54 +00:00
David Goodwin
db1f495f9b main.php: use db_in_clause() instead (thanks @copilot) 2026-01-29 13:41:04 +00:00
David Goodwin
a82177c7c0 simplify salt creation (rely on random_bytes() rather than other means) (thanks @copilot) 2026-01-29 13:38:15 +00:00
David Goodwin
7f839077f1 sort backup.php db tables list, remove duplicates 2026-01-29 13:37:47 +00:00
David Goodwin
8693d2bd13 vacation.php: use immutable DateTime, fix range / time setting (thanks @copilot) 2026-01-29 13:33:27 +00:00
David Goodwin
a2e2521698 fix usleep/elapsed time calculation - microtime() is seeconds, so multiple etc. (thanks @copilot) 2026-01-29 13:31:06 +00:00
David Goodwin
8d7e797662 apparently sprintf can not return false, so remove these checks (thanks @copilot) 2026-01-29 13:29:30 +00:00
David Goodwin
fe7b013449 rename INSTALL.TXT to INSTALL.md 2026-01-28 09:50:26 +00:00
David Goodwin
b092017f9b be more explict over what types class properties should be 2026-01-28 09:50:26 +00:00