>>>   OK, this version catches users who try to log in using another of
>>> your domains with their full email address (which inludes the name of
>>> the locked out domain).  Yes, I ignored your idea of keeping the
>>> locked out domains in a separate file.  :-(  This was the easiest way
>>> for me to do this at present.  If your control panel is not able to
>>> insert/remove the line  '###LOCKED OUT###' => 'locked_out.php',  into
>>> the config.php file for vlogin, then I suppose we'll have to come up
>>> with something else... But that's got to be it for me for tonight.
>>
>> ah... that said, I got time to think it over and I think I'll add the
>> option to keep a separate list of locked out users/domains, since that
>> makes sense. off the top of my head, i'm thinking one file, where
>> users and domains can be combined as such:
>>
>>
>> user: [EMAIL PROTECTED]
>> user: [EMAIL PROTECTED]
>> domain: baddomain.net
>> user: [EMAIL PROTECTED]
>>
>>
>> and so forth.  sound workable?
>
>> Sounds perfect!  That makes it real easy for me to manage with control
>> panel software.
>>
>> How hard do you think it will be to implement?
>
> no problem.  already have the code reworked with hooks in place and
> written the new algorithm.  just need to write the code later today.  i
> am thinking i will also move the same code into a separate plugin, since
> it makes sense as an independent plugin as well.

here is the latest.  i am hoping that this is the last of the vlogin
modifications for now.  i will be sending out a separate plugin that
duplicates the lockout table functionality within a day.

cheers,

   paul

>From README:

   $lockoutTable
   -------------
   is the path to a file that lists users and/or domains that should
   not be allowed to log in to SquirrelMail.  If $lockoutEnabled is
   turned on, and this setting indicates a legitimate file, it will
   block access to all users and domains listed therein.  Users and
   domains can be indicated using wildcards and can each have their
   own page that will be displayed when they are locked out.  See
   the sample lockout_table.dat file for help building this table.

   If you use this functionality, you may want to edit the file(s)
   you have indicated as the target lockout page to be displayed
   in order to customize the message that will be seen when someone
   is locked out.  Note that this will typically catch locked out
   users no matter which of your domains they attempt to log in through.
   Note that this is one of two ways to lock out domains, the other
   being a special entry in $virtualDomains (see below).  One or
   both of these methods may be used.


Attachment: vlogin-3.2.tar.gz
Description: application/gzip

Reply via email to