Skip to content

Conversation

@thnilsen
Copy link

@thnilsen thnilsen commented Nov 14, 2018

Dear Benjamin,

I have added a few updates to the current develop branch that might be of interest to others...

  • Norwegian translation to the code
  • Fix XSS bug
  • Fix email formatting bug when using non english characters.
  • Updated the IP Whitelist feature as suggested in pull request IP Whitelist Check for Creating Credentials #49, but with the recommended changes you requested.
  • Added option to display remaining time/views on viewing of secrets

Regards,
Thomas

…on…fig.php

- Moved various static text into translations - fixes bemosior#48

- Fixed formatting issue which caused email input field to be displayed outside of the main form frame, same as with the submit button.

- Fixed issue with function sanitizeEmail() in input.php which failed under php7.x. The mysql_real_escape_string() function was removed in php 7.0.0 and there is no need to escape the string as it is already validated by the filter_var(...) function.
New option to allow showing reminder time/views for a secret.
- New cofiguration option to enable/disable : $showExpiryInfo
- Fixes bemosior#42
- Depends on moment.js script, and requires $language_moment setting in config.php

Added changes to Norwegian translation.

Removed commented out code from about.php
@thnilsen thnilsen changed the title Norwegian translation and and a XSS bug fix Norwegian translation and and a XSS bug fix ++ Nov 14, 2018
A number of new options are now configurable from config.php. It is now
possible to define the senders address and display name from config.php.
Mail format has been changed from plaintext to html format.
In addition, it is now possible to use the PHPmailer() library if
installed.

The new config options are :

- $fromEmail : Will be used as default sender address if not overriden by
  authenticated user.

- $fromName : Will be used as the display name of fromEmail

- $signature :  A text string to be added as signature to the email. This
  Should be written as HTML.

- $PHPMailer  : Enables or disables the use of PHPMailer

- $PHPMailerPath : Path to PHPMailers src folder

- $PHPMailerSmtp : Use SMTP rather than standard mail() with PHPMailer

- $PHPMailerHost : SMTP host to use if SMTP is enabled

- $PHPMailerPort : Port for SMTP host

- $PHPMailerSecure : Set to SSL/TLS/StartTLS or blank

- $PHPMailerUser : Username to authenticate against SMTP server

- $PHPMailerPassword : Password for given SMTP user
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant