We have received many requests from users that a new window should be used for composing messages.

I have two roundcube instances sharing single sql database. Today suddenly people on instance 1 were logged out after few seconds.

It turned out that instance 2 had wrong time (+2h into future) and garbage collector from 2 instance simply deleted old session of people from 1 instance!

Ups :)

I think that's a bug. Time from sql server should be used for consistency.

That is easy change I guess and would make roundcube no longer dependand on local time correctness when used in such setups.

This would be a nice feature, altough it could probably
only be implemented on Unix/Linux boxes.

All email programs have the option to download all
attachements together.
When there are multiple attachments in an email (for
example a collection of many pictures) , it becomes
tedious and annoying having to download them to the
local hard disk separately one by one.
It is prefered to have them downloaded in one link, as
available in many email sites like GMail for example.
This feature should be included a.s.a.p.
thank you!

Images should be pre-cached so that pages load faster
on the users first visit.  

I suggest loading the images in a hidden layer on the
login page.  That way, as the user types in his
username and password, the browser is loading the
images in the background, without notice.

Several vCard files won't import -- they contain non-ASCII characters and are coded in cp1250 (see attachments).

Since the files don't contain information about their codepage, I guess it's necessary to specify this during import. I believe a system-wide default setting for this would be nice too.

Details: when importing iksiński-wab.vcf (a file created by Windows Address Book), I get the following error message:

SERVICE CURRENTLY NOT AVAILABLE! Error No. [0x01F4]

when importing iksiński-thebat.vcf (a file created by The Bat!), the result is that an entry is imported, but a name of such a contact is:

a:2:{i:0;s:16:"Piotr Iksi=F1ski";s:4:"type";a:1:{i:0;s:8:"ENCODING";}}

--which is crazy :)

Could these be fixed?

The currently implemented RSS feed is not perfect since it requires a regular authentication using the login form.

Suggestion: remove from core and create a plugin which offers HTTP-authentication. This is what all common RSS readers support.

Attached is a patch and some new images to add contact groups to 0.2beta.

It has only been tested with postgresql, but I have added the database changes to the mysql files in SQL as well. I have not made the changes for other database types but it should be trivial to do for anyone familiar with them.

These patches probably don't completely play nice with LDAP, I don't have an ldap server here to test with.

zip file contains 6 images to put in skins/default/images/buttons.

I am using an apache reverse proxy as an SSL termination point. In order for apache to redirect the user's browser to HTTPS for login the apache server needs to be notified that the user is viewing a login page. This is usually accomplished by the application issuing a redirect to /login when the user is not authenticated or a user's session has expired, unfortunately roundcube does an internal forward as a result apache has no knowledge the user is seeing the login page and is unable to enable HTTPS. This issue will also apply to other security systems and SSL termination products. Using SSL for all communication is way to expensive. Moving to a REST based URL structure might resolve the issue.

When daylight saving is activated one hour is added to all dates, but only should be added when the date is on daylight saving time. Now I must disable daylight saving and I will have to enable it in april.