Hello Pavel,
On Saturday, August 25, 2001, Pavel Cerny wrote...
> hi, i have to patch or reconfigure squirrelmail to make it able to work
> without cookies support enabled on the client side...
> is there any commonly known solution on how to do this?
> ..or any body think it to be nearly impossible due to something?
It's a security concern not to do it the way we're currently doing it.
The password is encrypted, and stored in a cookie. If you don't want
to use cookies, it means you have to store the password in the session
file. This means that the password will be in the same place the
encryption key is located, not a good idea to be honest.
If you really wish to go against that general idea, do a search in the
code for:
sqgetGlobalVar('key', $key, SQ_COOKIE)
Replace it with:
spgetGlobalVar('key', $key , SQ_SESSION)
Then in src/redirect.php about line 96, there is a line like:
setcookie('key' , $key , 0 , $base_uri);
Change it to:
sqsession_register($key , 'key');
That should be it. However, the first step (replacing all the
spgetGlobalVar code) will take a while, it appears in a lot of files.
That should change soon when we start to look at a central global
start script.
--
Jonathan Angliss
([EMAIL PROTECTED])
Posting Hints: http://www.squirrelmail.org/wiki/en_US/MailingListPostingGuidelines
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
--
squirrelmail-users mailing list
Posting Guidelines: http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
List Address: [EMAIL PROTECTED]
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
