Commit Graph

259 Commits

Author SHA1 Message Date
Marcus Bointon d73f836c27
Cleanup 2016-12-28 14:14:27 +01:00
Marcus Bointon 06aae8b651
Merge PR #930 from @Zanaxer 2016-12-28 13:28:04 +01:00
Marcus Bointon 8d68507d7b
Minor cleanup, fix 2016-12-28 13:17:21 +01:00
Paul Buonopane 833c35fe39
CVE-2016-10033, CVE-2016-10045: More patches, stricter anti-escaping 2016-12-28 06:30:43 -05:00
Paul Buonopane 9743ff5c7e Fix for CVE-2016-10045 and CVE-2016-10033 (#929)
* Fix for CVE-2016-10045 and CVE-2016-10033

* CVE-2016-10033: Also check escapeshellarg
2016-12-28 11:11:08 +01:00
Marcus Bointon 9e4b8fb3de
Minor cleanup, fixes #918, broken version file
Remove duplicate check for Sender address
2016-12-26 11:09:10 +01:00
Marcus Bointon ed4e7ce8ad
Remove broken check 2016-12-24 16:43:41 +01:00
Marcus Bointon d0c1d1abbd
5.2.18 2016-12-24 00:49:54 +01:00
Marcus Bointon 4835657cd6
Check that sendmail path exists before trying to use it
Validate Sender address
Consistent use of empty()
2016-12-24 00:40:05 +01:00
Marcus Bointon f475467ee3
5.2.17 release 2016-12-09 11:03:27 +01:00
Marcus Bointon e423355350
Fix for #881 2016-11-11 22:10:49 +01:00
lamansky 2a4918b65e Allow DKIM private key to be provided as a string (#879) 2016-11-10 20:35:26 +01:00
1stborn f92b368446 ability to create custom message IDs and boundaries (#877) 2016-11-09 15:56:39 +01:00
Chema 6eaec68260 Closes #861 (#862)
* Closes #861

* Update class.phpmailer.php
2016-10-20 17:36:26 +02:00
Marcus Bointon 239d0ef38c
Explain message ID format 2016-10-04 18:23:01 +02:00
Marcus Bointon 5221cfd1d5
Merge remote-tracking branch 'origin/master' 2016-09-20 22:19:03 +02:00
Elan Ruusamäe 595b45e198 more languages rename
cz => cs
no => nb
br => pt_BR
se => sv
2016-09-16 15:41:53 +03:00
Marcus Bointon cb761c9750 Comments 2016-08-18 00:49:50 +02:00
Marcus Bointon 3e665fbb56 Clarify msgHTML docs 2016-08-05 12:44:02 +02:00
Marcus Bointon 4f7967ac91 Implement fallback for DKIM signing on old versions of PHP and OpenSSL, see #785 2016-07-28 11:56:21 +02:00
Marcus Bointon 6a6165f576 Fix language code check 2016-07-26 08:51:48 +02:00
Marcus Bointon 90f1924694 Merge remote-tracking branch 'origin/master' 2016-07-22 12:44:16 +02:00
Marcus Bointon 134a31892c Validate language code 2016-07-22 12:35:06 +02:00
Arne Jørgensen fcf9cb7ae5 Fix ISO-639-1 code for Danish (#764)
The ISO-639-1 code for Danish is `da` (`dk` is the ISO 3166-1 alpha-2 for Denmark).
2016-07-08 11:09:34 +02:00
Marcus Bointon 1d85f9ef3e Bump version to 5.2.16 2016-06-06 11:09:37 +02:00
Marcus Bointon 1361047a5d Add DKIM example 2016-06-06 10:54:56 +02:00
Marcus Bointon 7d341c105b Don't set mail() additional_parameters to space when not being used, fixes #582 2016-06-06 10:36:56 +02:00
Marcus Bointon d3c73b1739 Reset encoding on simple bodies, hopefully will fix #728! 2016-05-22 10:26:48 +02:00
Marcus Bointon 59663fd25a Don't set overall encoding just because we're changing a sub-part - quoted-printable and base64 are not valid encodings for a multipart container anyway. 2016-05-21 22:06:07 +02:00
Marcus Bointon 7b9fd07309 Use SMTPOptions in smtpConnect(), see #718 2016-05-13 09:30:56 +02:00
Marcus Bointon d0186171b2 Bump version to 5.2.15 2016-05-10 20:39:36 +02:00
Marcus Bointon 77c0bc8d28 Add ability to inject custom validator and set custom default validator, fixes #573 2016-05-09 11:18:50 +02:00
Lito 0f7182213a Use $exception default value if not set on construct. (#682) 2016-04-11 15:28:11 +02:00
Marcus b5845ebada Mention that SingleTo doesn't work in SMTP 2016-03-18 11:00:45 +01:00
Marcus 33c33b5332 Improve check for SMTP close on destruct, fixes #658 2016-03-18 10:58:50 +01:00
Mikkel Paulson 355d9578dd Fixed issues with regular expressions.
1) Normalizing line breaks uselessly replaced `\n` with `\n`.
2) [A-z] matches the range including ``^`[]_\``; corrected to `a-z` and
   updated to include full RFC3986-compliant syntax including `+-.`.
3) Collapsing logic uselessly replaced 1 space with 1 space.
2016-03-15 16:36:15 -04:00
bertpoort 38c1e85fcb DKIM improvements
Improve DKIM with SHA-256 hashing and date header signing
2016-01-29 18:43:57 +01:00
Synchro 9211ba6728 Ensure Message-ID is always valid, fixes #587 2016-01-07 16:28:39 +01:00
Synchro 7850d1806a Use alternativeExists method for consistency 2016-01-07 16:27:50 +01:00
Synchro c2bde34e58 Clarify source of invalid addresses, fixes #599 2015-12-28 12:59:47 +01:00
Synchro 104359d993 Fix extra line break in getSentMIMEMessage(), fixes #589 2015-12-18 13:16:51 +01:00
bartbutler a3c729eca3 Fix base64 encoding in alt body with long lines
Extend body base64 fix from 9269a656ca to alt body.
2015-11-23 23:16:15 -08:00
Synchro 1102fd37ae Bump version to 5.2.14 2015-11-01 11:14:44 +01:00
Synchro 6687a96a18 Add test for line breaks in addresses vulnerability
Don't allow line breaks in addresses
Don't allow line breaks in SMTP commands
Rearrange tests so slowest tests run last
2015-11-01 11:12:04 +01:00
Synchro 0f24d1e679 Version checks are no use for language constructs 2015-10-21 14:47:35 +02:00
François B 5a17d6a1fc Fix a typo in comment 2015-10-19 17:09:43 +02:00
Marcus Bointon efd91ea796 Merge pull request #529 from fbonzon/master
Allow addresses with IDN
2015-10-14 23:10:52 +02:00
François B 65c213ae70 Fix comments, suggested by scrutinizer 2015-10-14 22:33:01 +02:00
François B 0fa9518609 Allow addresses with IDN
Accepts Internationalized Domain Name everywhere PHPMailler expects
email addresses (To, CC, BCC, Reply-To, From, Sender and
ConfirmReadingTo).

Requires PHP >= 5.3 with "intl" extension installed and "mbstring"
extension enabled. Earlier versions don't see a change, i.e. specifying
an address with IDN still fails validation.

Follow-up to PR #516. Ran test/phpmailerTest.php

Other changes:

- From, Sender and ConfirmReadingTo addresses are now validated in
send(). Previously, only From and Sender addresses would be validated
only if specified via the setFrom() method. ConfirmReadingTo was never
validated.

- Half language strings for the 'invalid_address' message used colon at
the end and half didn't. Harmonized messages to always include colon,
and not add a second one with PHP code.
2015-10-14 22:02:07 +02:00
François B c2447dcf97 Prefer array_key_exists() over isset() 2015-10-13 23:16:06 +02:00