Re: Re garding customization of Squirrelmail

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




glraj wrote:
> 
> Dear Tomas,
> 
> Thanks for the reply , I checked the configtest.php , it is detecting the
> base url correctly.
> 
> The problem is when I remove the login redirect plugin , the Secure login
> plugin is working
> perfectly , but when the login redirect plugin is installed, the secure
> login is not working.
> 
> I have added all the plugin hooks in the new html page as per the docs
> mentioned.
> 

Secure login redirects user from plain text site to ssl one. Redirect login
redirects user from standard login.php page to your login form. They are
attached to same hook in login.php and they conflict.

You don't need secure login plugin. Make sure that your login form sends
data to correct src/redirect.php and put your webmail on secured virtual
host only. I think I've already said it. Keep it simple. That's best advice
you can get. If you want to secure things, make sure that they are not
available in insecure form. You don't need mod_rewrite or some SquirrelMail
plugins for that. Install webmail only on secured virtual host. In case
users enter address without https://, put simple redirection on plain text
host. If you think that partially secured webmail is better, can you explain
why you think that way. Your setup is more complex, is harder to support and
you are wasting your time trying to stitch conflicting plugin solution
together.

Login redirect hooks are also not needed, if your website has only one login
form. SquirrelMail has standard option for that. Even when you have multiple
sites, hooks are still not needed. You can always redirect signouts to
src/login.php and login_redirect plugin will handle redirection there.

If you insist on using plugins that are not needed, I might just start
quoting pigs from rfc1925.

-- 
Tomas
-- 
View this message in context: http://old.nabble.com/Regarding-customization-of-Squirrelmail-tp29115182p29125815.html
Sent from the squirrelmail-users mailing list archive at Nabble.com.


------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux