FreddleSpl0itandGitHub e406ecd461 Merge pull request #7387 from mailcow/fix/mfk25 ...

Hardening mailcow

2026-07-30 09:07:10 +02:00

..

ajax

Add MTA-STS support for alias domains (#6972)

2025-12-15 16:29:21 +01:00

lib

[Web] Switch QR code generation from external API to local library and fix composer.json/lock mismatch

2026-02-24 11:02:47 +01:00

presets

[UI] Corrected Sieve Preset 1 (Fixed Regex)

2024-05-13 15:02:41 +02:00

footer.inc.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

functions.acl.inc.php

[Web] Fix permission exception in IdP actions

2025-01-15 12:48:10 +01:00

functions.address_rewriting.inc.php

Fix @ prefixing domain rewrite and update localization

2025-02-24 22:36:17 -08:00

functions.admin.inc.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

functions.app_passwd.inc.php

Merge pull request #6780 from patschi/fix-pwcomplexity-apppasswds

2025-09-29 11:53:26 +02:00

functions.auth.inc.php

[Web] Fix LDAP/Keycloak login TypeError - missing JSON decode for attributes

2026-03-11 09:18:03 +01:00

functions.customize.inc.php

[Web] include hostname in default website title

2025-10-06 10:58:35 +02:00

functions.dkim.inc.php

dkim: Add support for 3072 and 4096 bit RSA keys (#6365)

2025-03-11 15:30:46 +01:00

functions.docker.inc.php

fix: show stopped and failed containers in dashboard and API

2026-02-27 13:41:36 +01:00

functions.domain_admin.inc.php

[Web] remove domain admin sso token after use

2026-07-24 10:26:23 +02:00

functions.fail2ban.inc.php

[Web] f2b banlist - add http status codes

2023-07-11 10:31:25 +02:00

functions.fwdhost.inc.php

add missing access control

2026-03-19 12:41:47 +01:00

functions.inc.php

[Web] harden CORS origin matching and add Vary: Origin

2026-07-30 08:37:18 +02:00

functions.mailbox.inc.php

Merge pull request #7387 from mailcow/fix/mfk25

2026-07-30 09:07:10 +02:00

functions.mailq.inc.php

[Web] Return json array when mailq empty, fixes #3738

2020-09-06 11:59:36 +02:00

functions.oauth2.inc.php

[Web] Various PHP 8 fixes, partly fixes #4219

2021-08-09 08:28:22 +02:00

functions.policy.inc.php

[Web] Various PHP 8 fixes, partly fixes #4219

2021-08-09 08:28:22 +02:00

functions.presets.inc.php

[Web] Clean PHP code by removing unused variables (#3646)

2020-07-11 13:20:38 +02:00

functions.pushover.inc.php

Added SENDER_ADDRESS and SENDER_NAME as variables for messages

2022-11-17 21:01:18 +01:00

functions.quarantine.inc.php

[Web] add dot stuffing for quarantine raw release

2026-07-23 15:01:44 +02:00

functions.quota_notification.inc.php

[Web] Feature: Allow copies of quota notifications to be sent via SMTP to internal or external addresses

2021-05-23 13:18:52 +02:00

functions.ratelimit.inc.php

[Web] Fix permission exception in IdP actions

2025-01-15 12:48:10 +01:00

functions.rspamd.inc.php

[Web] break loop if rspamd_map is valid

2024-04-04 16:29:58 +02:00

functions.tls_policy_maps.inc.php

[Web] Important: Removed unnecessary *_int attributes from GET elements, _only_ returning int values now (same for all attributes which were provided as html char and int)

2020-09-17 19:49:15 +02:00

functions.transports.inc.php

[Web] Fix transport validation

2021-08-17 22:07:06 +02:00

header.inc.php

Improve template URI escaping and parameter handling

2026-03-19 12:48:43 +01:00

init_db.inc.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

prerequisites.inc.php

[Web] Switch QR code generation from external API to local library and fix composer.json/lock mismatch

2026-02-24 11:02:47 +01:00

sessions.inc.php

[Web] switch from GET to POST for datatable requests

2026-03-03 08:10:16 +01:00

spf.inc.php

[Web] Fix: spf record validation failed with redirect

2021-05-28 23:48:15 +02:00

triggers.admin.inc.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

triggers.domainadmin.inc.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

triggers.global.inc.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

triggers.user.inc.php

[Web] Add forced 2FA setup and password update enforcement

2026-02-24 10:44:33 +01:00

twig.inc.php

Improve template URI escaping and parameter handling

2026-03-19 12:48:43 +01:00

vars.inc.php

Add Uzbek language (#7224)

2026-05-13 16:42:38 +02:00