- Fix email_dns_check setting not used for identities/contacts (#1487740)
| | |
| | | CHANGELOG Roundcube Webmail |
| | | =========================== |
| | | |
| | | - Fix email_dns_check setting not used for identities/contacts (#1487740) |
| | | - Fix ICANN example addresses doesn't validate (#1487742) |
| | | - Security: protect login form submission from CSRF |
| | | - Security: prevent from relaying malicious requests through modcss.inc |
| | |
| | | foreach ($CONTACTS->get_col_values('email', $a_record, true) as $email) { |
| | | if (strlen($email)) { |
| | | $_email = rcube_idn_to_ascii($email); |
| | | if (!check_email($_email, false)) { |
| | | if (!check_email($_email)) { |
| | | $OUTPUT->show_message('emailformaterror', 'warning', array('email' => $email)); |
| | | rcmail_overwrite_action($return_action); |
| | | return; |
| | |
| | | foreach (array('email', 'reply-to', 'bcc') as $item) { |
| | | if ($email = $save_data[$item]) { |
| | | $ascii_email = rcube_idn_to_ascii($email); |
| | | if (!check_email($ascii_email, false)) { |
| | | if (!check_email($ascii_email)) { |
| | | // show error message |
| | | $OUTPUT->show_message('emailformaterror', 'error', array('email' => $email), false); |
| | | rcmail_overwrite_action('edit-identity'); |