Commit Graph

264 Commits

Author SHA1 Message Date
Kirill Voronov a3b4f6b281 add specific chars for matching of ipv6 addresses (#1040)
when validating servers in the `Host` property.
2017-05-11 00:22:50 +01:00
rsdifu 42c7591bb5 Date header should be more dynamic (#1023)
When a message is sent, unless the MessageDate is explicitly set, the Date header should always be set to the current rfcDate() value.

This is necessary for long-running processes that create a single PHPMailer instance, so all emails sent during the lifetime of the process don't have the same Date header value of the first email sent from the process.

This is important because Gmail in particular, uses the Date header value to show how long ago an email was sent when viewing the email.  (The list view in Gmail, however, uses the Received header value to show when an email was sent.)

These differing times will lead to confusion for users, often resulting in them trying to do several things like updating their timezone in Google's settings, or on their computers, which would result in no resolution.
2017-04-09 08:25:43 +02:00
Marcus Bointon 7115df4a6f
5.5.23 2017-03-15 20:32:56 +01:00
Marcus Bointon ad4cb09682
More careful checking of paths in msgHTML 2017-01-06 22:35:37 +01:00
Marcus Bointon 1d51856b76
v5.2.21
Fix missed version number update
2016-12-28 16:35:48 +01:00
Marcus Bointon d73f836c27
Cleanup 2016-12-28 14:14:27 +01:00
Marcus Bointon 06aae8b651
Merge PR #930 from @Zanaxer 2016-12-28 13:28:04 +01:00
Marcus Bointon 8d68507d7b
Minor cleanup, fix 2016-12-28 13:17:21 +01:00
Paul Buonopane 833c35fe39
CVE-2016-10033, CVE-2016-10045: More patches, stricter anti-escaping 2016-12-28 06:30:43 -05:00
Paul Buonopane 9743ff5c7e Fix for CVE-2016-10045 and CVE-2016-10033 (#929)
* Fix for CVE-2016-10045 and CVE-2016-10033

* CVE-2016-10033: Also check escapeshellarg
2016-12-28 11:11:08 +01:00
Marcus Bointon 9e4b8fb3de
Minor cleanup, fixes #918, broken version file
Remove duplicate check for Sender address
2016-12-26 11:09:10 +01:00
Marcus Bointon ed4e7ce8ad
Remove broken check 2016-12-24 16:43:41 +01:00
Marcus Bointon d0c1d1abbd
5.2.18 2016-12-24 00:49:54 +01:00
Marcus Bointon 4835657cd6
Check that sendmail path exists before trying to use it
Validate Sender address
Consistent use of empty()
2016-12-24 00:40:05 +01:00
Marcus Bointon f475467ee3
5.2.17 release 2016-12-09 11:03:27 +01:00
Marcus Bointon e423355350
Fix for #881 2016-11-11 22:10:49 +01:00
lamansky 2a4918b65e Allow DKIM private key to be provided as a string (#879) 2016-11-10 20:35:26 +01:00
1stborn f92b368446 ability to create custom message IDs and boundaries (#877) 2016-11-09 15:56:39 +01:00
Chema 6eaec68260 Closes #861 (#862)
* Closes #861

* Update class.phpmailer.php
2016-10-20 17:36:26 +02:00
Marcus Bointon 239d0ef38c
Explain message ID format 2016-10-04 18:23:01 +02:00
Marcus Bointon 5221cfd1d5
Merge remote-tracking branch 'origin/master' 2016-09-20 22:19:03 +02:00
Elan Ruusamäe 595b45e198 more languages rename
cz => cs
no => nb
br => pt_BR
se => sv
2016-09-16 15:41:53 +03:00
Marcus Bointon cb761c9750 Comments 2016-08-18 00:49:50 +02:00
Marcus Bointon 3e665fbb56 Clarify msgHTML docs 2016-08-05 12:44:02 +02:00
Marcus Bointon 4f7967ac91 Implement fallback for DKIM signing on old versions of PHP and OpenSSL, see #785 2016-07-28 11:56:21 +02:00
Marcus Bointon 6a6165f576 Fix language code check 2016-07-26 08:51:48 +02:00
Marcus Bointon 90f1924694 Merge remote-tracking branch 'origin/master' 2016-07-22 12:44:16 +02:00
Marcus Bointon 134a31892c Validate language code 2016-07-22 12:35:06 +02:00
Arne Jørgensen fcf9cb7ae5 Fix ISO-639-1 code for Danish (#764)
The ISO-639-1 code for Danish is `da` (`dk` is the ISO 3166-1 alpha-2 for Denmark).
2016-07-08 11:09:34 +02:00
Marcus Bointon 1d85f9ef3e Bump version to 5.2.16 2016-06-06 11:09:37 +02:00
Marcus Bointon 1361047a5d Add DKIM example 2016-06-06 10:54:56 +02:00
Marcus Bointon 7d341c105b Don't set mail() additional_parameters to space when not being used, fixes #582 2016-06-06 10:36:56 +02:00
Marcus Bointon d3c73b1739 Reset encoding on simple bodies, hopefully will fix #728! 2016-05-22 10:26:48 +02:00
Marcus Bointon 59663fd25a Don't set overall encoding just because we're changing a sub-part - quoted-printable and base64 are not valid encodings for a multipart container anyway. 2016-05-21 22:06:07 +02:00
Marcus Bointon 7b9fd07309 Use SMTPOptions in smtpConnect(), see #718 2016-05-13 09:30:56 +02:00
Marcus Bointon d0186171b2 Bump version to 5.2.15 2016-05-10 20:39:36 +02:00
Marcus Bointon 77c0bc8d28 Add ability to inject custom validator and set custom default validator, fixes #573 2016-05-09 11:18:50 +02:00
Lito 0f7182213a Use $exception default value if not set on construct. (#682) 2016-04-11 15:28:11 +02:00
Marcus b5845ebada Mention that SingleTo doesn't work in SMTP 2016-03-18 11:00:45 +01:00
Marcus 33c33b5332 Improve check for SMTP close on destruct, fixes #658 2016-03-18 10:58:50 +01:00
Mikkel Paulson 355d9578dd Fixed issues with regular expressions.
1) Normalizing line breaks uselessly replaced `\n` with `\n`.
2) [A-z] matches the range including ``^`[]_\``; corrected to `a-z` and
   updated to include full RFC3986-compliant syntax including `+-.`.
3) Collapsing logic uselessly replaced 1 space with 1 space.
2016-03-15 16:36:15 -04:00
bertpoort 38c1e85fcb DKIM improvements
Improve DKIM with SHA-256 hashing and date header signing
2016-01-29 18:43:57 +01:00
Synchro 9211ba6728 Ensure Message-ID is always valid, fixes #587 2016-01-07 16:28:39 +01:00
Synchro 7850d1806a Use alternativeExists method for consistency 2016-01-07 16:27:50 +01:00
Synchro c2bde34e58 Clarify source of invalid addresses, fixes #599 2015-12-28 12:59:47 +01:00
Synchro 104359d993 Fix extra line break in getSentMIMEMessage(), fixes #589 2015-12-18 13:16:51 +01:00
bartbutler a3c729eca3 Fix base64 encoding in alt body with long lines
Extend body base64 fix from 9269a656ca to alt body.
2015-11-23 23:16:15 -08:00
Synchro 1102fd37ae Bump version to 5.2.14 2015-11-01 11:14:44 +01:00
Synchro 6687a96a18 Add test for line breaks in addresses vulnerability
Don't allow line breaks in addresses
Don't allow line breaks in SMTP commands
Rearrange tests so slowest tests run last
2015-11-01 11:12:04 +01:00
Synchro 0f24d1e679 Version checks are no use for language constructs 2015-10-21 14:47:35 +02:00