Oguzhan Kayhan wrote:
>
>
>> On 2/4/08, Oguzhan Kayhan <oguzhank@xxxxxxxxxxxxxx> wrote:
>>> Hello, as i mentioned one of my previous emails, I need to handle
>>> cookies
>>> for all sessions, which is dependent on domain or user+domain
>>> knowledge..
>>>
>>> First of all i am not a programmer mostly a network admin., just can
>>> call
>>> myself a newbie about php.
>>>
>>> In general, we have several domains in our structure with different IMAP
>>> servers. But most of our users have multiple accounts in different
>>> domains.
>>> So if he logs on to a server and wants to check another account on
>>> another
>>> server, because of current cookie structure, he logs out from other
>>> session and connect the latest login session normally.
>>> I need suggestions to find my way around here.
>>> As i check the cookie information, cookie name set as smsessid. maybe it
>>> might be a good idea to set cookie name as smsessdomain or user-domain
>>> etc..I am not sure about its possibility. Or another way maybe to handle
>>> cookie sessions.
>>> I need just clues to work on.
>>
>> Search the mailing list archives. This is a known issue that there is
>> no solution for other than to ensure users LOG OUT before using
>> another account on the same server. If you change the domain, that
>> might work. If you host multiple domains for each mail server, you
>> could point a "webmail" URI for each domain to a single SquirrelMail
>> installation (using Login Manager/vlogin) and your cookie domain
>> should be different and thus, I think, not suffer this problem, but
>> who knows.
>>
>> 1.5.x will have cookie-less support at some point in the medium term.
>>
> I dont want to change the URL for domains actually, if i can solve this
> issue with cookies, (or maybe without cookies as u mentioned for 1.5.x
> versions) it will be better for me.
> I wonder if i modify my previous solution for cookie handling works for
> multidomain also or not.
> We made the following modification in strings.php first.
>
> function sqm_baseuri(){
> ...
> ...
> /* Commented for disabling
> if (sqgetGlobalVar('base_uri',$base_uri,SQ_SESSION)){
> return $base_uri;
> }
> */
> ...
> ...
> }
>
> then in global.php file
>
> we added the following line
> ini_set("session.save_path","/var/lib/php5/domain1");
> /domain2 and so on..
>
> Again reminding u i am not a programmer, not know much about how cookies
> work etc...
> What if i add a variable instead of domain1 2 etc..
> like
> ini_set("session.save_path","/var/lib/php5/$domain");
>
> but as i understand sqmail loads global.php and creates session before
> login screen appears.
> And so..it doesnt have a chance to get the $domain variable from
> multilogin plugin configuration. Am i wrong? Or does it create the session
> after i click on login...which can make things easier.
>
>
SquirrelMail 1.4.x can be modified to work without cookies. Most of code
will work without any changes and only plugins that use password
information, images or http/html redirects will need modifications. You
don't need 1.5.x to do that unless you want to push 1.5.x and keep 1.4.x
outdated for that. Cookieless interface does not need some wonders. You just
have to handle session transid differences between php versions and provide
wrapper functions to work with information that is currently stored cookies.
Standard SquirrelMail stores only three variables in cookies and only two of
them are essential.
If you check mailing list archives, you will find messages that talk about
detecting active webmail session and blocking user in order to prevent
session corruption. So there is a way to prevent session corruption and it
is simple enough.
--
Tomas
--
View this message in context: http://www.nabble.com/sqmail-cookie-for-multidomain-tp15266199p15287614.html
Sent from the squirrelmail-users mailing list archive at Nabble.com.
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
