If you're running SQL for your user database, it's pretty easy. Just add a user to the user table. If you're using the registry for your user database, you can either write a COM object to add the user into the registry or you can use the ASP WSScript object to run the adduser.exe command line exec. If you don't want to mess with your registry (I would probably mess something up), then the WSScript object might be your best bet. I'm just not sure how secure your application would be if one of your ASP pages opened up an object that could potentially run any .exe or .bat on your server.
Here's another problem that I just found out about yesterday. If your login screen is also on that other server, you may have a few security holes. Your username and password are stored in a cookie whenever you log out (regardless of what checkboxes you check on the login screen). These are written from, say, mail.domain.com where IMAIL resides. If you use the default templates, the login.html page DELETES the cookies BEFORE you log in. This assumes that your login page is at mail.domain.com. If your login page is on www.domain.com, those cookies don't get deleted. Script on www.domain.com doesn't have permissions to touch cookies on mail.domain.com!!! Why is this significant? Because when you view email messages using the IMail web interface, any javascript included in any email messages is executed in your browser. This javascript can easy take the UNDELETED cookies with your username and password and send them to another web site. Essentially, the cookie delete functions on the login page need to be moved to the menu.html page if you're going to have your login page on a different domain. -Norm -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, April 10, 2002 7:03 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] asp pages I want to know if there is a way to create a asp page and have it running on a website independent of the imail server and have it create new email address through the imail server? Thank you, Brian Mason [EMAIL PROTECTED] www.abbeycomputers.com Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
