SqirrelMail 1.5.2

A version of SquirrelMail for PHP 8.0 and above with additional changes for compatibility or security reasons.

This version contains the following changes:

• Legacy constructors replaced with __construct.
• While/List/Each are now ForEach.
• Instances of mt_rand are now cryptographically secure, using random_int.
• Message IDs are generated differently.
  • The ID is now a Version 5 UUID based off 64 cryptographically secure random bytes.
  • The domain now matches the value of the username variable, if it contains an "@". Otherwise, it falls back to the SERVER_NAME variable like normal.
• Instances of SizeOf are now StrLen because PHP is not C.
• Instances of create_function are now inline functions.
• The X-Frame-Options: SAMEORIGIN header has been replaced with CSP's frame-ancestors header. This is set based on the provider_uri preference, and accepts any http or https domains or subdomains that match.
  • A new variable in the config will be added at a later point.
• SCRAM support for SMTP and IMAP logins, supporting any hash algorithm PHP supports (with checks against HMAC list on 7.2+).
• Optional parameters corrected for PHP 8.0.

Additionally, some minor fixes that would cause warnings or strange failures have also been resolved. Changes to the official source code are tracked in the trunk branch and merged with master as soon as possible. I'm looking into a way to automate this process.