postfixadmin

Fixes :

• https://github.com/postfixadmin/postfixadmin/issues/690
• https://github.com/postfixadmin/postfixadmin/issues/687 ( thanks @stefanomarty )

Which were from some MySQL collation changes missing from the 3.3 branch and a related fix for what was MariaDB only syntax (now ought to work for MySQL too) (related to the collation fixes).

See also https://github.com/postfixadmin/postfixadmin/compare/postfixadmin-3.3.12...postfixadmin-3.3.13

• psalm and phpcs formatting fixes
• Update smarty (4.3.0)
  • (this includes a smarty security fix that ought not affect PostfixAdmin).
  • includes fixes for PHP 8.1 and also #541
• fixes #632 (passing a null value into htmlentities)

• Improve PHP 8 compatability (crypt())
• Support $CONF['database_port'] when connecting to MySQL

• Merge password expiration fixes from https://github.com/postfixadmin/postfixadmin/pull/493
• Remove html readonly attribute from user's vacation page to/from selectors.
• vacation.pl - allow smtp helo to be specified (see https://github.com/postfixadmin/postfixadmin/pull/495)
• Security fix - ClickJacking protection (thanks @huntr-helper / @ranjit-git) (see https://github.com/postfixadmin/postfixadmin/issues/523)
• Security fix (low risk) - Improve randomness with PFA_token for CSRF protection (thanks @michaellrowley)
• Fix viewlog to allow admins to see all domains (thanks @pgimalac, https://github.com/postfixadmin/postfixadmin/issues/516)
• Disable password autocompletion in edit forms (thanks @gabrielfin, see https://github.com/postfixadmin/postfixadmin/pull/510)

(a previous 3.3.10 release didn't include a change to the version number in config.inc.php ... sorry)

• Improve Ukrainian language (ua.lang) (thanks: andrew.kudrinov)
• Ensure we update timestamp fields (created / modified) when performing db operations, see: https://github.com/postfixadmin/postfixadmin/issues/469
• Add domain_admins.id pk column for non-sqlite users, see: https://github.com/postfixadmin/postfixadmin/issues/475
• Add fix for MySQL error where a default datetime value in the domain field breaks the upgrade.php db schema update, see https://github.com/postfixadmin/postfixadmin/issues/489 (probably only MySQL 8+)
• Bug fix quota levels (now user configurable again; thanks @csware, see https://github.com/postfixadmin/postfixadmin/commit/bfc7af5c8efe2a68c47286cc870b56cb4f929a3f

• Fix invalid template referenced in broadcast-message.php; see https://github.com/postfixadmin/postfixadmin/issues/465
• Fix PostgreSQL boolean issue in setup (unable to add superuser); see https://github.com/postfixadmin/postfixadmin/issues/461
• Fix SQL error on password change; see https://github.com/postfixadmin/postfixadmin/issues/456
• Add/improve Ukrainian language (thanks: andrew.kudrinov)

• Fix issue with setup.php referencing function that wasn't in 3.3.6 release ( see https://github.com/postfixadmin/postfixadmin/issues/454 )
• Slightly improved psalm checks (static analysis)
• Update CHANGELOG and config.inc.php version.

Version 3.3.5 - 2021/01/27

• Fix include path for password-change.php and improve UI for password-recover / password-change (nav bar was missing, remove table layout, fix labels not visible) (see https://github.com/postfixadmin/postfixadmin/issues/430)
• Fix users/edit-alias to remove unnecessary space (see https://github.com/postfixadmin/postfixadmin/issues/442)
• Improve documentation
• Improve password length check example in config.inc.php (see https://github.com/postfixadmin/postfixadmin/issues/423)
• Improve ADDITIONS/update_quota.pl (update to use quota2 table)
• Check for some config setting, and do not error if they are not set (see https://github.com/postfixadmin/postfixadmin/issues/437)
• Add pt-pt (portugese) translation (thanks Numo Carrilho/Nunix)
• Fix missing template variable 'domain_selected'

• Fix forgot-password (theme + trying to use class before autoload registered) (see //github.com/postfixadmin/postfixadmin/issues/427)
• Fix PHP 8.0 issues (string{} offset in CLI, psalm warning about string + int in MailboxHandler)
• Add PHP 8.0 to travis build + fix travis build
• Fix editform to add linefeeds on for e.g. alias editing (see https://github.com/postfixadmin/postfixadmin/pull/424)
• Fix mysql_crypt password hash - not all MySQL variants have RANDOM_BYTES function, so use our PHP based salt instead. (see https://github.com/postfixadmin/postfixadmin/issues/422)

Improve handling of exceptions if using dovecot etc for authentication.

Improve setup.php page error handling.

• Slightly improved documentation (See DOCUMENTS/HASHING.md)
• Fix issue with vacation's not saving/working, change to support date AND time (previously just date).
• Improve setup.php for existing users (more helpful prompt if their setup_password hash is in the old format).
• Possible improvements for Debian packages

Bug fix release based on feedback from 3.3.0.

Should resolve issues with the new theme not appearing (if you had theme_css defined in your config) and the CLI not working.

• Change of theme (bootstrap)
• Security improvements (setup.php)
• Change of internal database routines (moved to use PHP's PDO)
• Various improvements and bug fixes (psalm static analysis)

Users moving to v3.3.0 will find their existing setup_password will no longer work, and will need regenerating - either using the form on https://youriste.com/postfixadmin/setup.php or by using something like :

php -r 'echo password_hash("topSecretPassword", PASSWORD_DEFAULT);'

which will output something like : $2y$10$sYSaSQecc6kSs..........oyn.ttQxtKIUPV/q8eS6

`

• Upgrade Smarty (v3.1.33, upstream security fix), see https://github.com/postfixadmin/postfixadmin/commit/907bd7ee4632f87aec723e709e198bbf48ab6fbe
• Fix SQLite paging issues, see https://github.com/postfixadmin/postfixadmin/issues/161 and https://github.com/postfixadmin/postfixadmin/issues/87
• Fix postfixadmin-cli, see https://github.com/postfixadmin/postfixadmin/issues/296

Postfixadmin 3.2.4 - 2020/04/17

• Upgrade Smarty (v3.1.35), see https://github.com/smarty-php/smarty/releases/tag/v3.1.35
• Fix issues with quota (cli mailbox creation)
• Improve database compatability (row->r).