Hi List,

OK, I'm starting to track down the problem I had earlier last week
(people being logged off SqWebmail for no reason - apparently).

It turns out that people are being sent to the expired.html page due to
having the same username. I was under the impression that sqwebmail with
authmysql could handle virtual domains? But, if [EMAIL PROTECTED] logs
in, and then [EMAIL PROTECTED] logs in, sqwebmail sends the first user
to the expired.html page thinking that it's the same person logged in
but with a different session_id. Have I set something up incorrectly?
The users have distinct maildirs, there is no crossover. They have the
same login name but SqWebmail doesn't seem to be taking their domains
into consideration to make the person unique.

The way I discovered this was that I thought I would let multiple users
log into a single pop-box. By commenting out the code in sqwebmail.c
which checked for session id being the same (in  the main2() function),
I thought I could achieve this. It worked, until people of [EMAIL PROTECTED]
started seeing each other's emails!

Any help would be appreciated!
Regards,
Andrew


Reply via email to