View Single Post
  #4  
Old 30th January 2010, 17:48
gr33d gr33d is offline
Junior Member
 
Join Date: Nov 2009
Posts: 23
Thanks: 1
Thanked 0 Times in 0 Posts
Default

i only replaced my password with "mail_admin_password" in the $csp_dsn variable below:

Code:
<?php

   // Global Variables, don't touch these unless you want to break the plugin
   //
   global $csp_dsn, $password_update_queries, $lookup_password_query,
          $force_change_password_check_query, $password_encryption,
          $csp_salt_query, $csp_salt_static, $csp_secure_port,
          $csp_non_standard_http_port, $csp_delimiter, $csp_debug,
          $min_password_length, $max_password_length, $include_digit_in_password
,
          $include_uppercase_letter_in_password, $include_lowercase_letter_in_pa
ssword,
          $include_nonalphanumeric_in_password;

   $csp_dsn = 'mysql://mail_admin:mail_admin_password@localhost/mail';

   $lookup_password_query = 'SELECT count(*) FROM users WHERE username = "%1" AN
D password = %4';

   $password_update_queries = array(
            'UPDATE users SET password = %4 WHERE email = "%1"');

   $force_change_password_check_query = '';

   $password_encryption = 'MYSQLENCRYPT';

   $csp_salt_static = 'LEFT(password, 2)';

   $csp_secure_port = 0;

   //$csp_non_standard_http_port = 8080;
   $csp_non_standard_http_port = 0;

   $min_password_length = 6;
   $max_password_length = 0;
   $include_digit_in_password = 0;
   $include_uppercase_letter_in_password = 0;
   $include_lowercase_letter_in_password = 0;
   $include_nonalphanumeric_in_password = 0;

   //$csp_delimiter = '|';
   $csp_delimiter = '@';
   $csp_debug = 0;
?>
i installed the squirrelmail debugger plugin and when i login now, i receive:

Code:
Notice: A session had already been started - ignoring session_start() in /usr/share/squirrelmail/functions/global.php on line 429

Stack Trace:

session_start()
/usr/share/squirrelmail/functions/global.php
line 429

    sqsession_start()
    /usr/share/squirrelmail/functions/global.php
    line 409

        sqsession_is_active()
        /usr/share/squirrelmail/functions/global.php
        line 250

            sqsession_register("http://1.1.1.1", "sq_base_url")
            /usr/share/squirrelmail/functions/strings.php
            line 350

                get_location()
                /usr/share/squirrelmail/src/redirect.php
                line 35

My browser information:
  Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7 (.NET CLR 3.5.30729)

My web server information:
  PHP Version 5.2.6-3ubuntu4.5
  PHP Extensions (List)
    * 0 = zip
    * 1 = xmlwriter
    * 2 = libxml
    * 3 = xml
    * 4 = wddx
    * 5 = tokenizer
    * 6 = sysvshm
    * 7 = sysvsem
    * 8 = sysvmsg
    * 9 = session
    * 10 = SimpleXML
    * 11 = sockets
    * 12 = soap
    * 13 = SPL
    * 14 = shmop
    * 15 = standard
    * 16 = Reflection
    * 17 = posix
    * 18 = mime_magic
    * 19 = mbstring
    * 20 = json
    * 21 = iconv
    * 22 = hash
    * 23 = gettext
    * 24 = ftp
    * 25 = filter
    * 26 = exif
    * 27 = dom
    * 28 = dba
    * 29 = date
    * 30 = ctype
    * 31 = calendar
    * 32 = bz2
    * 33 = bcmath
    * 34 = zlib
    * 35 = pcre
    * 36 = openssl
    * 37 = xmlreader
    * 38 = apache2handler
    * 39 = gd
    * 40 = mcrypt
    * 41 = mysql
    * 42 = mysqli
    * 43 = PDO
    * 44 = pdo_mysql

SquirrelMail-specific information:
  Version:  1.4.15
  Plugins (List)
    * 0 = compatibility
    * 1 = change_sqlpass
    * 2 = debugger

My IMAP server information:
  Server type:  courier
  Server info:  * OK [HIDDEN] IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double Precision, Inc.  See COPYING for distribution information.
  Capabilities:  IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS
i dont know much php, but i thought maybe the session was still active from one of the "blank" logins and waited 25 minutes to login again. same results.
Reply With Quote