On Fri, Jul 05, 2002 at 11:49:18AM +0200, Richard Schiffelers
<[EMAIL PROTECTED]> wrote:
> Hi All,
>
> Two questions/remarks concerning the webmail function of E-Smith 5.5. I have
> cleanly installed the new 5.5 (incl. the latest blade).
>
> 1. When i access the login page of the webmail the username always contains
> 'admin'. Why ? I would think it should be empty.
Sheesh, the source is right there! But enough people have asked this
without looking that I figured I might as well. From
horde/imp/templates/login/login.inc:
<td align="right" class="light"><b><?= _("Username") ?></b></td>
<td align="left"><input type="text" tabindex="1" name="imapuser" value="<?=
Horde::getFormData('imapuser', getenv('REMOTE_USER')) ?>" /></td>
And from horde/lib/Horde.php:
function getFormData($var, $default = null)
{
if (isset($GLOBALS['HTTP_POST_VARS'][$var])) {
return Horde::dispelMagicQuotes($GLOBALS['HTTP_POST_VARS'][$var]);
} elseif (isset($GLOBALS['HTTP_GET_VARS'][$var])) {
return Horde::dispelMagicQuotes($GLOBALS['HTTP_GET_VARS'][$var]);
} else {
return $default;
}
}
So if $imapuser isn't set (and it won't be), it uses the current value
of $REMOTE_USER, which is "admin" if you happen to be logged into the
server-manager. (If you happened to be logged into your fnord i-bay,
it'd be "fnord".)
-Rich
--
------------------------------ Rich Lafferty ---------------------------
Systems Administrator/Support Engineer, Network Server Solutions Group
Mitel Networks, Ottawa, ON +1 613 592 2122 (x2513)
---------------------------- [EMAIL PROTECTED] ------------------------
--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
