Re: [SOLVED] error when passby login.php

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Paul Lesniewski a écrit :
>>>>>> SM : 1.5.1
>>>>>> PHP : 4.4
>>>>>> Apache : 2.2.3
>>>>>> OS : debian etch
>>>>>>
>>>>>>
>>>>>> Hi,
>>>>>>
>>>>>>
>>>>>> users launch squirremail through  our portal (only one identification
>>>>>> needed), so we  have  our own application  with  the  following link :
>>>>>>
>>>>>> http://x.x.x.x/src/redirect.php?login_username=firstname.name&secretkey=password
>>>>>>
>>>>>> but trying that gives the message : You must be logged in to access this page.
>>>>>>
>>>>>> In SM 1.4.9a it works wery well
>>>>>>
>>>>>> Is there any solution ?
>>>>>>
>>>>>>
>>>>>>             
>>>>> Use SM 1.5.2.  If it still does not work, re-post.  1.5.1 is too old
>>>>> to be supported.
>>>>>
>>>>> Also note that you are exposing your system - it is very vulnerable
>>>>> when you pass passwords in plaintext in the query string.
>>>>>
>>>>>           
>>>> ok i just installed SM 1.5.2
>>>>
>>>>         
>>> Thank you.
>>>
>>>
>>>       
>>>> but it still doesn't work ( the same message)
>>>>
>>>>         
>>> Please show your mail log entries for this event, and describe the
>>> format of your FULL IMAP account names.  Are you using Login Manager
>>> (vlogin)?
>>>
>>>
>>>       
>> what i did :
>> - my URL is
>> http://x.x.x.x/src/redirect.php?login_username=firstname.name&secretkey=password
>> - in redirect.php line 34 i add :
>>     $login_username=$_GET['login_name'];
>>     
>
> "login_name" isn't even in your URL
>
>   
>>     $secretkey=$_GET['secretkey'];
>> => is not very clean i admit but it works for me
>>     
>
> Line 34 already does the same thing:
>
> sqGetGlobalVar('login_username', $login_username);
> sqGetGlobalVar('secretkey', $secretkey);
>
> I don't know what is wrong in your particular case, but I just
> re-tested 1.5.2 with this URL:
>
> http://example.org/webmail/src/redirect.php?login_username=jose&secretkey=pwd
>
> And it works fine.  For testing, right after the lines I showed above
> (line 37), I put this:
>
> echo "LOGIN USER: $login_username<hr />PASS: $secretkey<hr />";exit;
>
> You do not need to patch SM for it to work in this way.
>
>  - Paul
>
>   
You're right, i don't know what i missed, i reinstalled => i t works 
without any change
Sorry the noise.



-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux