Dear customers,

iRedAdmin-Pro-MySQL-1.2.0 (AKA iRedAdmin-Pro for MySQL backend) is now available for your upgrading and purchasing. All customers should already received an email with download link before 2011-06-12, if you didn't receive any email from iRedMail project, please help check your Spam/Junk folder first, or mail to support @ iredmail.org and ask for one.

Important Note

This release fixes some possible XSS vulnerabilities, and add XSRF protection to harden web security, please upgrade it AS-SOON-AS-POSSIBLE.

If you have old iRedAdmin-Pro installed, upgrade tutorials are ready for your use. Upgrading from previous version is pretty simple: uncompress source tarball, set file permission, copy config file from v1.1.0, restarting apache web server. That's all.

• Demo site is available here: http://www.iredmail.org/admin_demo.html

• Purchase now: http://www.iredmail.org/admin_buy.html

##################################
# What's new in v1.2.0
#

Improvements

• CSRF protect. Reference: Cross-Site Request Forgery

• Able to delete all admin logs with one click.

Fixed Issues

• Cannot view quarantined VIRUS mails. Thanks beez@forum <jason@indo...id>.

• Incorrect links of pages in per-user and per-domain activity list.

• Allow to use domain names which end with 2-6 chars. Thanks Julian P. <@consistency.at>.

• Fix EXCEEDED_DOMAIN_ACCOUNT_LIMIT issue while creating new user. Thanks Emidio Reggiani <emidio.reggiani@...it>, Tecnologia - PLUGNET <tecno@plugnet...br>.

• Allow normal admin to update catch-all address of domain. Thanks Chris Ip (chris.ip@...hk).

• Some possible XSS vulnerabilities.

Next release (v1.3.0) will achieve below features:

• Search accounts.

• Per-domain and per-user throtting.

Feedback, suggestions, feature requests are always welcome.